CVE-2016-1962

Severity

99%

Complexity

99%

Confidentiality

165%

Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.

CWE-416: Use After Free

CVSS 3.0 Base Score 9.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 8 years ago

2016-03-13 18:59:00

Last updated 5 years ago

2019-12-27 16:08:00

Affected Software

Mozilla Firefox

Mozilla Firefox ESR 38.0

38.0

Mozilla Firefox ESR 38.0.1

38.0.1

Mozilla Firefox ESR 38.0.5

38.0.5

Mozilla Firefox ESR 38.1.0

38.1.0

Mozilla Firefox ESR 38.1.1

38.1.1

Mozilla Firefox ESR 38.2.0

38.2.0

Mozilla Firefox ESR 38.2.1

38.2.1

Mozilla Firefox Extended Support Release (ESR) 38.3.0

38.3.0

Mozilla Firefox ESR 38.4.0

38.4.0

Mozilla Firefox ESR 38.5.0

38.5.0

Mozilla Firefox ESR 38.5.1

38.5.1

Mozilla Firefox Extended Support Release (ESR) 38.6.0

38.6.0

Mozilla Firefox Extended Support Release (ESR) 38.6.1

38.6.1

OpenSUSE 13.1

13.1

References

SUSE-SU-2016:0727

openSUSE-SU-2016:0731

openSUSE-SU-2016:0733

SUSE-SU-2016:0777

SUSE-SU-2016:0820

openSUSE-SU-2016:0876

openSUSE-SU-2016:0894

Third Party Advisory

SUSE-SU-2016:0909

DSA-3510

DSA-3520

http://www.mozilla.org/security/announce/2016/mfsa2016-25.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html