PT-2016-4938
CVE-2016-1948
·
Publicado
2016-01-31
·
Atualizado
2017-09-10
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 44.0 on Android
Description
The issue allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream, as HTTPS is not ensured for a lightweight-theme installation.
Recommendations
For versions prior to 44.0, update to version 44.0 or later to ensure HTTPS is used for lightweight-theme installations, preventing man-in-the-middle attacks.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾