PT-2016-1823 · Mozilla+5 · Firefox Esr+6

Publicado

2016-04-26

·

Atualizado

2024-12-12

·

CVE-2016-2808

CVSS v3.1

7.5

Alta

VetorAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 Mozilla Firefox ESR versions 38.x prior to 38.8 Mozilla Firefox ESR versions 45.x prior to 45.1
Description The issue is related to the watch implementation in the JavaScript engine, causing a buffer overflow. This can be exploited by a remote attacker using a specially crafted web site, potentially allowing the execution of arbitrary code or causing a denial of service, such as a crash due to out-of-bounds write access.
Recommendations For Mozilla Firefox versions prior to 46.0, update to version 46.0 or later. For Mozilla Firefox ESR versions 38.x prior to 38.8, update to version 38.8 or later. For Mozilla Firefox ESR versions 45.x prior to 45.1, update to version 45.1 or later.

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1433
ALT-PU-2016-1454
BDU:2016-01156
CESA-2016_0695
CVE-2016-2808
DSA-3559-1
MGASA-2016-0158
OPENSUSE-SU-2016_1211-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2016:0695
RHSA-2016_0695
SUSE-SU-2016:1258-1
SUSE-SU-2016:1342-1
SUSE-SU-2016:1374-1
USN-2936-1
USN-2936-3

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Ubuntu