CVE-2016-9902

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.

• CWE-346

• http://rhn.redhat.com/errata/RHSA-2016-2946.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2973.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94885Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037461Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1320039Exploit, Issue Tracking, Patch
• https://security.gentoo.org/glsa/201701-15Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-94/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-95/Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2946.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2973.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94885Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037461Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1320039Exploit, Issue Tracking, Patch
• https://security.gentoo.org/glsa/201701-15Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-94/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-95/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9896Use-after-free while manipulating the "navigator" object wit…
• CVE-2016-9897Memory corruption resulting in a potentially exploitable cra…
• CVE-2016-9898Use-after-free resulting in potentially exploitable crash wh…
• CVE-2016-9899Use-after-free while manipulating DOM events and removing au…
• CVE-2016-9900External resources that should be blocked when loaded by SVG…
• CVE-2016-9901HTML tags received from the Pocket server will be processed …
• CVE-2016-9903Mozilla's add-ons SDK had a world-accessible resource with a…
• CVE-2016-9904An attacker could use a JavaScript Map/Set timing attack to …
• CVE-2016-9905A potentially exploitable crash in "EnumerateSubDocuments" w…
• CVE-2016-9906Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9907Quick Emulator (Qemu) built with the USB redirector usb-gues…6.5
• CVE-2016-9908Quick Emulator (Qemu) built with the Virtio GPU Device emula…3.3