PT-2016-7643
CVE-2016-9076
·
Published
2016-11-15
·
Updated
2024-12-12
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 50
Description
The issue allows a "" dropdown menu to cover location bar content, potentially leading to spoofing attacks. This attack requires e10s to be enabled in order to function.
Recommendations
For versions prior to 50, update to version 50 or later to resolve the issue. As a temporary workaround, consider disabling e10s until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾