CVE-2016-5292 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 74%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 < 50.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

sid	132.0.1-1 fixed

firefox-esr

bookworm	115.14.0esr-1~deb12u1 fixed
bookworm (security)	128.4.0esr-1~deb12u1 fixed
bullseye	115.14.0esr-1~deb11u1 fixed
bullseye (security)	128.4.0esr-1~deb11u1 fixed
sid	128.4.0esr-1 fixed
trixie	128.3.1esr-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

firefox

precise	Fixed 50.0+build2-0ubuntu0.12.04.2 released
trusty	Fixed 50.0+build2-0ubuntu0.14.04.2 released
xenial	Fixed 50.0+build2-0ubuntu0.16.04.2 released
yakkety	Fixed 50.0+build2-0ubuntu0.16.10.2 released

thunderbird

precise	not-affected
trusty	dne
xenial	not-affected
yakkety	not-affected

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://www.securityfocus.com/bid/94337

http://www.securitytracker.com/id/1037298

https://bugzilla.mozilla.org/show_bug.cgi?id=1288482

https://www.mozilla.org/security/advisories/mfsa2016-89/

http://www.securityfocus.com/bid/94337

http://www.securitytracker.com/id/1037298

https://bugzilla.mozilla.org/show_bug.cgi?id=1288482

https://www.mozilla.org/security/advisories/mfsa2016-89/