8.8

CVE-2016-2818

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 45.1.0
Mozilla ≫ Firefox Version 45.1.1
Debian ≫ Debian Linux Version 8.0
Mozilla ≫ Firefox Version <= 46.0.1
Novell ≫ Suse Linux Enterprise Desktop Version 12.0 Update sp1
Novell ≫ Suse Linux Enterprise Server Version 12.0 Update sp1
Opensuse ≫ Leap Version 42.1
Opensuse ≫ Opensuse Version 13.1
Opensuse ≫ Opensuse Version 13.2
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 15.10
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.87% 0.89
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html
Third Party Advisory
http://www.mozilla.org/security/announce/2016/mfsa2016-49.html
Vendor Advisory
http://www.securityfocus.com/bid/91075
http://www.securitytracker.com/id/1036057
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2993-1
Third Party Advisory
http://www.debian.org/security/2016/dsa-3600
Third Party Advisory
http://www.debian.org/security/2016/dsa-3647
http://www.ubuntu.com/usn/USN-3023-1
https://access.redhat.com/errata/RHSA-2016:1217
Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1392
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1234147
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256493
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256739
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1256968
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1261230
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1261752
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1263384
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1264575
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1265577
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1267130
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1269729
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1273202
Issue Tracking
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1273701
Issue Tracking
Permissions Required