CVE-2016-1958

CVE-2016-1958 describes a spoofing vulnerability in Mozilla Firefox versions prior to 45.0 and Firefox ESR 38.x before 38.7, affecting various Linux distributions. An attacker could exploit this flaw by using a javascript: URL to manipulate the address bar, potentially deceiving users about the true origin of a webpage. This vulnerability carries a CVSS v3 score of 4.3 (MEDIUM), indicating a network-based attack requiring user interaction, with a low impact on integrity and no impact on confidentiality or availability. While the exploit complexity is low, it relies on social engineering to trick the user. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. The vulnerability has received minimal community discussion and media coverage, suggesting a low profile and limited interest from attackers.