SecuritySpace - CVE-2016-9078

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9078

Description: Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1.

Test IDs: 1.3.6.1.4.1.25623.1.0.809824 1.3.6.1.4.1.25623.1.2.1.2016.91 1.3.6.1.4.1.25623.1.0.809823

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9078
BugTraq ID: 94569
http://www.securityfocus.com/bid/94569
http://www.securitytracker.com/id/1037353

CVE ID:	CVE-2016-9078
Description:	Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1.
Test IDs:	1.3.6.1.4.1.25623.1.0.809824 1.3.6.1.4.1.25623.1.2.1.2016.91 1.3.6.1.4.1.25623.1.0.809823
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9078 BugTraq ID: 94569 http://www.securityfocus.com/bid/94569 http://www.securitytracker.com/id/1037353