NetSight
IP …
medium5.5

CVE-2016-5265

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (…

Impact

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.

Affected products

VendorProductAffected versions
OracleLinux
Versions 5.0, 6, 7
MozillaFirefox
through 47.0.1
Versions 45.1.0, 45.1.1, 45.2.0, 45.3.0

Weakness classification

CWE-79CWE-200

References