Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:43.0.4:*:*:*:*:*:*:*

part: a version: 43.0.4 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.962476
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.962477
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.962479
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.962480

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-1948 vulnerable 2026-06-03 14:35:36.134870 Details available
Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.
Published: 2016-01-31T18:00:00.000Z
Updated: 2024-08-05T23:10:40.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1947 vulnerable 2026-06-03 14:35:36.134435 Details available
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
Published: 2016-01-31T18:00:00.000Z
Updated: 2024-08-05T23:10:40.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1945 vulnerable 2026-06-03 14:35:36.128834 Details available
The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer during processing of a ZIP archive.
Published: 2016-01-31T18:00:00.000Z
Updated: 2024-08-05T23:10:40.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1944 vulnerable 2026-06-03 14:35:36.128366 Details available
The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Published: 2016-01-31T18:00:00.000Z
Updated: 2024-08-05T23:10:40.285Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1943 vulnerable 2026-06-03 14:35:36.127831 Details available
Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
Published: 2016-01-31T18:00:00.000Z
Updated: 2024-08-05T23:10:40.243Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.