Vulnetix
Try Vulnetix Request Demo
CVE-2016-9900 PUBLISHED

External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

EPSS 1.01% · 77.0th percentile

Risk Scores

EPSS Score
1.01%
77.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSfirefox50.0.2+build1-0ubuntu0.16.04.1, 50.0+build2-0ubuntu0.16.04.2, 49.0.2+build2-0ubuntu0.16.04.2
Ubuntu:14.04:LTSfirefox36.0.1+build2-0ubuntu0.14.04.1, 36.0.4+build1-0ubuntu0.14.04.1, 37.0+build2-0ubuntu0.14.04.1
Ubuntu:14.04:LTSthunderbird1:31.7.0+build1-0ubuntu0.14.04.1, 1:31.8.0+build1-0ubuntu0.14.04.1, 1:38.2.0+build1-0ubuntu0.14.04.1
Ubuntu:16.04:LTSthunderbird0, 1:38.3.0+build1-0ubuntu2, 1:38.5.1+build2-0ubuntu1

Timeline

References

Open in Interactive Console →