PT-2016-5232 · Cairo+4 · Cairo+5

Bert Massop

·

Publicado

2016-08-03

·

Atualizado

2024-12-12

·

CVE-2016-2839

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 48.0 Mozilla Firefox ESR versions 45.x prior to 45.3
Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted video. This is due to improper interaction between cairo surface extent calls and libav header allocation in FFmpeg.
Recommendations For Mozilla Firefox versions prior to 48.0, update to version 48.0 or later. For Mozilla Firefox ESR versions 45.x prior to 45.3, update to version 45.3 or later.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-2839
OPENSUSE-SU-2016:2253-1
OPENSUSE-SU-2016:2254-1
OPENSUSE-SU-2016_1964-1
OPENSUSE-SU-2016_2026-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2016:2061-1
SUSE-SU-2016:2131-1
SUSE-SU-2016:2195-1
USN-3044-1

Produtos afetados

Ffmpeg
Firefox
Suse
Ubuntu
Cairo
Libav