CVE-2016-2810

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0

Description The issue is related to insufficient access control, allowing attackers to bypass intended Signature access requirements. This can be achieved via a crafted application that leverages content-provider permissions. As a result, an attacker could read the browser history or a saved password. The vulnerability can be exploited by a remote attacker using a specially crafted application to bypass existing access restrictions.

Recommendations For Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0, update to version 46.0 or later to resolve the issue.