21 Sep 2016
CVE-2016-5282 Vulnerability
Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource. (CVSS:0.0) (Last Update:2016-09-22)