Name: CVE-2016-1958: Undefined Security Weakness
Published: 2016-03-13T00:00:00.000Z
Keywords: CVE, CVE-2016-1958, CWE-254, CVSS 4.3, EPSS 0.00619

browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.

CVSS Details

CVSS 3.1 Base Score: 4.3
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	centos-upgrade-firefox	Jul 6, 2016	Mar 9, 2016
Debian	View advisory ↗	debian-upgrade-firefox-esrdebian-upgrade-iceweasel	Mar 13, 2016	Mar 9, 2016
Freebsd	View advisory ↗	freebsd-upgrade-package-firefoxfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbird	Dec 10, 2025	Mar 8, 2016
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-dev-libs-nsprgentoo-linux-upgrade-dev-libs-nssgentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin	Oct 30, 2017	Mar 13, 2016
Huawei Euleros 2_0_sp1	View advisory ↗	huawei-euleros-2_0_sp1-upgrade-firefox	Nov 30, 2017	Mar 13, 2016
Mfsa2016 21	View advisory ↗View advisory ↗	mozilla-firefox-esr-upgrade-38_7mozilla-firefox-upgrade-45_0	Mar 10, 2016	Mar 8, 2016
Oracle Solaris	View advisory ↗	oracle-solaris-11-3-upgrade-developer-yasm-1-3-0-0-175-3-14-0-2-0oracle-solaris-11-3-upgrade-mail-thunderbird-45-3-0-0-175-3-14-0-4-0oracle-solaris-11-3-upgrade-mail-thunderbird-plugin-thunderbird-lightning-45-3-0-0-175-3-14-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-45-4-0-0-175-3-14-0-4-0oracle-solaris-11-3-upgrade-web-data-firefox-bookmarks-45-4-0-0-175-3-14-0-4-0	May 29, 2017	Mar 13, 2016
Oracle_linux	—	oracle-linux-upgrade-firefox	Mar 13, 2016	Mar 13, 2016
Suse	—	suse-upgrade-libfreebl3suse-upgrade-libfreebl3-32bitsuse-upgrade-libfreebl3-hmacsuse-upgrade-libfreebl3-hmac-32bitsuse-upgrade-libfreebl3-x86suse-upgrade-libsoftokn3suse-upgrade-libsoftokn3-32bitsuse-upgrade-libsoftokn3-hmacsuse-upgrade-libsoftokn3-hmac-32bitsuse-upgrade-libsoftokn3-x86suse-upgrade-mozilla-nsprsuse-upgrade-mozilla-nspr-32bitsuse-upgrade-mozilla-nspr-develsuse-upgrade-mozilla-nspr-x86suse-upgrade-mozilla-nsssuse-upgrade-mozilla-nss-32bitsuse-upgrade-mozilla-nss-certssuse-upgrade-mozilla-nss-certs-32bitsuse-upgrade-mozilla-nss-develsuse-upgrade-mozilla-nss-sysinitsuse-upgrade-mozilla-nss-sysinit-32bitsuse-upgrade-mozilla-nss-toolssuse-upgrade-mozilla-nss-x86suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translationssuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-develsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other	Mar 14, 2016	Mar 11, 2016
Ubuntu	View advisory ↗	ubuntu-upgrade-firefox	Mar 13, 2016	Mar 13, 2016

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub