Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2016-09-22T22:00:00
Updated: 2017-07-29T09:57:01
Reserved: 2016-06-03T00:00:00
Link: CVE-2016-5282
JSON object: View
NVD Information
Status : Modified
Published: 2016-09-22T22:59:16.957
Modified: 2017-07-30T01:29:08.647
Link: CVE-2016-5282
JSON object: View
Redhat Information
No data.
CWE