CVE-2016-1964

Severity

68%

Complexity

86%

Confidentiality

106%

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.

CWE-416: Use After Free

CVSS 3.0 Base Score 8.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

First reported 8 years ago

2016-03-13 18:59:00

Last updated 5 years ago

2019-12-27 16:08:00

Affected Software

openSUSE Leap 42.1

42.1

OpenSUSE 13.1

13.1

OpenSUSE 13.2

13.2

SUSE Linux Enterprise 12.0

12.0

Mozilla Firefox

Mozilla Firefox ESR 38.0

38.0

Mozilla Firefox ESR 38.0.1

38.0.1

Mozilla Firefox ESR 38.0.5

38.0.5

Mozilla Firefox ESR 38.1.0

38.1.0

Mozilla Firefox ESR 38.1.1

38.1.1

Mozilla Firefox ESR 38.2.0

38.2.0

Mozilla Firefox ESR 38.2.1

38.2.1

Mozilla Firefox Extended Support Release (ESR) 38.3.0

38.3.0

Mozilla Firefox ESR 38.4.0

38.4.0

Mozilla Firefox ESR 38.5.0

38.5.0

Mozilla Firefox ESR 38.5.1

38.5.1

Mozilla Firefox Extended Support Release (ESR) 38.6.0

38.6.0

Mozilla Firefox Extended Support Release (ESR) 38.6.1

38.6.1

Mozilla Thunderbird

References

SUSE-SU-2016:0727

openSUSE-SU-2016:0731

openSUSE-SU-2016:0733

SUSE-SU-2016:0777

SUSE-SU-2016:0820

openSUSE-SU-2016:0876

openSUSE-SU-2016:0894

Third Party Advisory

SUSE-SU-2016:0909

DSA-3510

DSA-3520

http://www.mozilla.org/security/announce/2016/mfsa2016-27.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html