CVE:CVE-2016-1955
CNNVD:CNNVD-201603-140
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 45.0之前版本中存在安全漏洞。远程攻击者可通过读取包含路径信息的Content Security Policy(CSP)违规报告利用该漏洞绕过同源策略，获取敏感信息。
solution:Upgrade novell suse_package_hub_for_suse_linux_enterprise to a higher version than 12,and avoid the version 12; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade mozilla firefox to a higher version than 44.0.2,and avoid the version (,44.0.2]