Summary
Jason Pang discovered that service workers intercept responses to plugin
network requests made through the browser. An attacker could potentially
exploit this to bypass same origin restrictions using the Flash plugin.
(CVE-2016-1949)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 44.0.2+build1-0ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —
Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which all…
References
-
report
https://ubuntu.com/security/CVE-2016-1949