First published: Tue Sep 20 2016(Updated: )
Last updated 24 July 2024
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <49 | 49 |
Mozilla Firefox | <=48.0.2 | |
debian/firefox | 133.0.3-1 | |
debian/firefox-esr | 115.14.0esr-1~deb11u1 128.5.0esr-1~deb11u1 128.3.1esr-1~deb12u1 128.5.0esr-1~deb12u1 128.5.0esr-1 128.5.1esr-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2016-5279 is a vulnerability in Mozilla Firefox before 49.0 that allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.
Mozilla Firefox before version 49.0 is affected by CVE-2016-5279.
CVE-2016-5279 has a medium severity.
To fix CVE-2016-5279, update Mozilla Firefox to version 49.0 or later.
You can find more information about CVE-2016-5279 on the following references: [link1](https://bugzilla.mozilla.org/show_bug.cgi?id=1249522), [link2](https://www.mozilla.org/en-US/security/advisories/mfsa2016-85/), [link3](http://www.mozilla.org/security/announce/2016/mfsa2016-85.html).