Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

UBUNTU-CVE-2016-5251 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceUBUNTU-CVE-2016-5251

UBUNTU-CVE-2016-5251

MEDIUM5.5

Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL.

Published Aug 3, 2016

Modified 6 months ago

Fix available

Details

Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL.

Affected Packages

firefox

Ubuntu 14.04 LTS

Fixed in:

48.0+build2-0ubuntu0.14.04.1

firefox

Ubuntu 16.04 LTS

Fixed in:

48.0+build2-0ubuntu0.16.04.1

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1255570

https://ubuntu.com/security/CVE-2016-5251

https://ubuntu.com/security/notices/USN-3044-1

https://www.cve.org/CVERecord?id=CVE-2016-5251

https://www.mozilla.org/en-US/security/advisories/mfsa2016-66/

CVSS Analysis

CVSS v3.0

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

NoneA:N

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Upstream

Related

Ecosystems

Ubuntu 14.04 LTS Ubuntu 16.04 LTS

Timeline

PublishedAug 3, 2016

ModifiedSep 8, 2025