PT-2016-1444 · Mozilla+5 · Firefox+5

Q1

·

Publicado

2016-03-08

·

Atualizado

2024-12-12

·

CVE-2016-1973

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0
Description The issue is related to a race condition in the GetStaticInstance function in the WebRTC implementation. This is due to insufficient checking of resource state when the resource can be shared. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service, specifically a use-after-free condition.
Recommendations For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of WebRTC functionality until the update is applied.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2016-1277
ALT-PU-2016-1454
BDU:2016-00745
CESA-2016_0373
CVE-2016-1973
OPENSUSE-SU-2016_0731-1
OPENSUSE-SU-2016_0733-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2016:0373
RHSA-2016_0373
USN-2917-1
USN-2917-2
USN-2917-3

Produtos afetados

Alt Linux
Centos
Firefox
Red Hat
Suse
Ubuntu