The host is missing an important security update according to Mozilla advisory, MFSA2016-17. The update is required to fix denial of service vulnerability. A flaw is present in the applications, which fails to prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report. Successful exploitation allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.