First published: Mon Jun 13 2016(Updated: )
Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Ubuntu Linux | =12.04 | |
Ubuntu Linux | =14.04 | |
Ubuntu Linux | =15.10 | |
Ubuntu Linux | =16.04 | |
Mozilla Firefox | <=46.0.1 | |
openSUSE | =42.1 | |
openSUSE | =13.1 | |
openSUSE | =13.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2832 is considered a moderate severity vulnerability that allows remote attackers to discover disabled plugins.
To fix CVE-2016-2832, update Mozilla Firefox to version 47.0 or later.
CVE-2016-2832 affects all versions of Mozilla Firefox prior to 47.0.
CVE-2016-2832 affects various Ubuntu Linux versions and openSUSE versions running vulnerable Firefox versions.
While CVE-2016-2832 primarily allows for plugin discovery, it can potentially lead to more intrusive attacks by combining with other vulnerabilities.