PT-2016-5223 · Mozilla+5 · Firefox Esr+6

Rh0

·

Publicado

2016-06-07

·

Atualizado

2024-12-12

·

CVE-2016-2819

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 47.0 Mozilla Firefox ESR versions prior to 45.2
Description The issue is related to a heap-based buffer overflow that can be triggered by foreign-context HTML5 fragments. This can be demonstrated by fragments within an SVG element, allowing remote attackers to execute arbitrary code.
Recommendations For Mozilla Firefox versions prior to 47.0, update to version 47.0 or later. For Mozilla Firefox ESR versions prior to 45.2, update to version 45.2 or later.

Exploit

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1630
ALT-PU-2017-1578
CESA-2016_1217
CVE-2016-2819
DLA-521-1
DSA-3600-1
MGASA-2016-0220
OPENSUSE-SU-2016_1552-1
OPENSUSE-SU-2016_1557-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2016:1217
RHSA-2016_1217
SUSE-SU-2016:1691-1
SUSE-SU-2016:1799-1
SUSE-SU-2016:2061-1
USN-2993-1

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Ubuntu