CVE-2016-5273

CVSS v3.0 8.8 (High)

CVSS v2.0 6.8 (Medium)

EPSS 0.98 % (84^th)

Affected Products 1

Advisories 5

The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site.

Weaknesses

CWE-284: Improper Access Control

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2016-09-22 22:59:06
(8 years ago)
Updated Date: 2017-07-30 01:29:08
(7 years ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox 48.0.2 and prior versions	cpe:2.3:a:mozilla:firefox		<= 48.0.2