vulnerability

Ubuntu: (Multiple Advisories) (CVE-2016-1939): Firefox vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Jan 31, 2016

Added

Feb 2, 2016

Modified

Mar 27, 2026

Description

Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208.

Solution

ubuntu-upgrade-firefox

References

CVE-2016-1939
https://attackerkb.com/topics/CVE-2016-1939
CWE-200
EUVD-EUVD-2016-3028
NVD-CVE-2016-1939
UBUNTU-USN-2880-1
UBUNTU-USN-2880-2
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-3028

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report