Fluid Attacks Database

Description

A flaw was found in the way Firefox handled installation of add-ons. An attacker could use this flaw to bypass the add-on installation prompt, and trick the user into installing an add-on from a malicious source.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	firefox	<0:38.2.1-1.el5_11	0:38.2.1-1.el5_11
rpm rhel6	firefox	<0:38.2.1-1.el6_7	0:38.2.1-1.el6_7
rpm rhel7	firefox	<0:38.2.1-1.el7_1	0:38.2.1-1.el7_1

Aliases

1. CVE-2015-44982. NVD-2015-44983. OSV-2015-4498

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.