PT-2016-4936 · Mozilla+3 · Firefox+3

Q1 · Published 2016-01-26 · Updated 2024-06-15 · CVE-2016-1945

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0

Description The issue is related to the nsZipArchive function in Mozilla Firefox, which might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer during processing of a ZIP archive.

Recommendations For versions prior to 44.0, update to version 44.0 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2016-1057

CVE-2016-1945

OPENSUSE-SU-2016_0309-1

OPENSUSE-SU-2024:10071-1

USN-2880-1

USN-2880-2

Affected Products

Alt Linux

Firefox

Suse

Ubuntu

References · 931

• https://ubuntu.com/security/CVE-2016-1938 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1947 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1944 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1942 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2880-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1935 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1937 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1945 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2880-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1945 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1931 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2880-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1945 · Vendor Advisory