CVE:CVE-2016-1939
CNNVD:CNNVD-201601-705
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 44.0之前版本中存在安全漏洞，该漏洞源于程序存储cookie时使用包含垂直制表符的名称。远程攻击者可通过读取HTTP Cookie头利用该漏洞获取敏感信息。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade mozilla firefox to a higher version than 43.0.4,and avoid the version (,43.0.4]