PT-2016-1447 · Mozilla+1 · Firefox+1

Q1 · Published 2016-03-08 · Updated 2024-12-12 · CVE-2016-1970

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0

Description The issue is caused by an integer underflow in the srtp unprotect function in the WebRTC implementation. This could allow a remote attacker to cause a denial of service, potentially resulting in memory corruption, or have other unspecified impacts.

Recommendations For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of WebRTC functionality until a patch is applied.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2016-00748

CVE-2016-1970

OPENSUSE-SU-2016_0731-1

OPENSUSE-SU-2016_0733-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Affected Products

Firefox

Suse

References · 2067

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201605-06 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1970 · Vendor Advisory
• http://mozilla.org/security/announce/2016/mfsa2016-32.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00748 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1970 · Security Note
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note