CVE-2016-9078

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 50.0.1

References

http://www.securityfocus.com/bid/94569Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037353Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1317641Exploit, Issue Tracking, Patch, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-91/Vendor Advisory
http://www.securityfocus.com/bid/94569Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037353Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1317641Exploit, Issue Tracking, Patch, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-91/Vendor Advisory

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-90797.5A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild CVE-2016-90809.8Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough CVE-2016-90819.8Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account CVE-2016-90825.5Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference CVE-2016-90837.8drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of s CVE-2016-90847.8drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denia CVE-2016-90853.3Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.CVE-2016-90866.5GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this CVE-2016-90879.8SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allo CVE-2016-90917.2Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS com CVE-2016-90928.8The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cro CVE-2016-90937.0A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-i