CVE-2016-1948

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0 on Android

Description The issue allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream, as HTTPS is not ensured for a lightweight-theme installation.

Recommendations For versions prior to 44.0, update to version 44.0 or later to ensure HTTPS is used for lightweight-theme installations, preventing man-in-the-middle attacks.