PT-2016-1824 · Mozilla+5 · Firefox Esr+6

Phil Ringnalda

+1

·

Publicado

2016-04-26

·

Atualizado

2024-10-22

·

CVE-2016-2807

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 Firefox ESR versions 38.x prior to 38.8 Firefox ESR versions 45.x prior to 45.1
Description The issue is related to multiple unspecified vulnerabilities in the browser engine, potentially allowing remote attackers to cause a denial of service, such as memory corruption and application crash, or possibly execute arbitrary code. The vulnerabilities are caused by a buffer overflow.
Recommendations For Mozilla Firefox versions prior to 46.0, update to version 46.0 or later. For Firefox ESR versions 38.x prior to 38.8, update to version 38.8 or later. For Firefox ESR versions 45.x prior to 45.1, update to version 45.1 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1433
ALT-PU-2016-1454
BDU:2016-01157
CESA-2016_0695
CESA-2016_1041
CVE-2016-2807
DLA-472-1
DSA-3559-1
DSA-3576-1
MGASA-2016-0158
MGASA-2016-0254
OPENSUSE-SU-2016:1769-1
OPENSUSE-SU-2016:1778-1
OPENSUSE-SU-2016_1211-1
OPENSUSE-SU-2016_1767-1
OPENSUSE-SU-2016_1778-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
RHSA-2016:0695
RHSA-2016:1041
RHSA-2016_0695
RHSA-2016_1041
SUSE-SU-2016:1258-1
SUSE-SU-2016:1342-1
SUSE-SU-2016:1374-1
USN-2936-1
USN-2936-3
USN-2973-1

Produtos afetados

Alt Linux
Centos
Firefox Esr
Firefox
Red Hat
Suse
Ubuntu