CVE-2016-1947
Published Jan 31, 2016
Last updated 6 years ago
Overview
- Description
- Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
- Source
- security@mozilla.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 4.7
- Impact score
- 1.4
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-19
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4863BE36-D16A-4D75-90D9-FD76DB5B48B7"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:firefox:43.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0A4FDC2-4904-4862-BC6C-627848D2C828"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:43.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E70DD85A-AB0F-4717-BF41-1D1B8C58C5CC"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:43.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C541BA08-967F-43F5-99EE-5E2C1547A240"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:43.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81D3E615-04A1-4064-8D9B-58DD8C1B9C4D"
},
{
"criteria": "cpe:2.3:a:mozilla:firefox:43.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2BA4661-5AA5-4DE1-8897-23F01CC8FC29"
}
],
"operator": "OR"
}
]
}
]