PT-2016-5228 · Mozilla+3 · Firefox+3

Tsmith + 1 · Published 2016-08-02 · Updated 2024-12-12 · CVE-2016-2835

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 48.0

Description The issue is related to multiple unspecified vulnerabilities in the browser engine, which can cause a denial of service due to memory corruption and application crash, or possibly allow the execution of arbitrary code via unknown vectors.

Recommendations For versions prior to 48.0, update to version 48.0 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2016-1836

ALT-PU-2017-1578

CVE-2016-2835

OPENSUSE-SU-2016_1964-1

OPENSUSE-SU-2016_2026-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

SUSE-SU-2016:2061-1

SUSE-SU-2016:2131-1

SUSE-SU-2016:2195-1

USN-3044-1

Affected Products

Alt Linux

Firefox

Suse

Ubuntu

References · 2124

• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2131-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3044-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-0718 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5255 · Vendor Advisory
• http://ubuntu.com/usn/USN-3044-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2835 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2835 · Security Note
• https://ubuntu.com/security/CVE-2016-5260 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2016-62 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2836 · Vendor Advisory