vulnerability

Oracle Solaris 11: CVE-2016-9900: Vulnerability in Firefox, Thunderbird

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
2017-05-29
Added
2017-05-29
Modified
2022-02-01

Description

External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox

Solution(s)

oracle-solaris-11-3-upgrade-mail-thunderbird-45-6-0-0-175-3-17-0-4-0oracle-solaris-11-3-upgrade-mail-thunderbird-plugin-thunderbird-lightning-45-6-0-0-175-3-17-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-45-6-0-0-175-3-16-0-3-0oracle-solaris-11-3-upgrade-web-browser-firefox-plugin-firefox-java-45-6-0-0-175-3-16-0-3-0oracle-solaris-11-3-upgrade-web-data-firefox-bookmarks-45-6-0-0-175-3-16-0-3-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.