PT-2016-1249 · Mozilla+3 · Firefox+3

Jesup + 1 · Published 2016-01-26 · Updated 2024-06-15 · CVE-2016-1931

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0

Description The issue is caused by multiple unspecified vulnerabilities in the browser engine, potentially allowing a remote attacker to cause a denial of service or execute arbitrary code. This can occur through vectors related to uninitialized memory encountered during brotli data compression, and other vectors.

Recommendations For versions prior to 44.0, update to version 44.0 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2016-1057

ALT-PU-2016-1454

BDU:2016-00510

CVE-2016-1931

OPENSUSE-SU-2016_0309-1

OPENSUSE-SU-2024:10071-1

USN-2880-1

USN-2880-2

Affected Products

Alt Linux

Firefox

Suse

Ubuntu

References · 944

• https://ubuntu.com/security/CVE-2016-1938 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1931 · Security Note
• https://ubuntu.com/security/CVE-2016-1947 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1931 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1944 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1942 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2880-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1935 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1937 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html · Vendor Advisory
• http://mozilla.org/security/announce/2016/mfsa2016-01.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2880-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1931 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2880-1 · Vendor Advisory