CVE-2016-2832

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 47.0

Description The issue allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes. This is related to the lack of protection for internal browser data. An attacker can exploit this to gain access to the full list of disabled plugins using CSS and pseudo-classes.

Recommendations For versions prior to 47.0, update to version 47.0 or later to resolve the issue.