CVE:CVE-2016-2833
CNNVD:CNNVD-201606-288
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 47之前版本中存在安全漏洞，该漏洞源于程序没有执行Content Security Policy(CSP)检查。远程攻击者可借助恶意的Web站点利用该漏洞绕过CSP保护，实施跨站脚本攻击。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade mozilla firefox to a higher version than 46.0.1,and avoid the version (,46.0.1]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04