CVE-2016-2832: Infoleak
Published Jun 13, 2016
·Updated
Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes.
Affected Software
8 affected components
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Canonical Ubuntu Linux=16.04
Mozilla Firefox<=46.0.1
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Event History
Jun 13, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2832?
CVE-2016-2832 is considered a moderate severity vulnerability that allows remote attackers to discover disabled plugins.
2
How do I fix CVE-2016-2832?
To fix CVE-2016-2832, update Mozilla Firefox to version 47.0 or later.
3
Which versions of Mozilla Firefox are affected by CVE-2016-2832?
CVE-2016-2832 affects all versions of Mozilla Firefox prior to 47.0.
4
What systems are vulnerable to CVE-2016-2832?
CVE-2016-2832 affects various Ubuntu Linux versions and openSUSE versions running vulnerable Firefox versions.
5
Can CVE-2016-2832 lead to further attacks?
While CVE-2016-2832 primarily allows for plugin discovery, it can potentially lead to more intrusive attacks by combining with other vulnerabilities.