Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:49.0:*:*:*:*:*:*:*

part: a version: 49.0 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.962701
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.962702
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.962704
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.962705

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9078 vulnerable 2026-06-03 14:36:15.478134 Details available
Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1.
Published: 2018-06-11T21:00:00.000Z
Updated: 2024-08-06T02:42:10.435Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.