PT-2016-1446 · Mozilla+1 · Firefox+1
Q1
·
Publicado
2016-03-08
·
Atualizado
2024-06-15
·
CVE-2016-1971
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 45.0
Description
The issue is related to the I420VideoFrame::CreateFrame function in the WebRTC implementation, which omits an unspecified status check. This could allow remote attackers to cause a denial of service, potentially through memory corruption, or have other unknown impacts. The vulnerability is also described as a buffer overflow issue in the same function.
Recommendations
For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider disabling the WebRTC implementation until a patch is available. Restrict access to the I420VideoFrame::CreateFrame function to minimize the risk of exploitation. Avoid using the affected WebRTC functionality in Mozilla Firefox until the issue is resolved.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Firefox
Suse