CVE-2016-1966

Severity

68%

Complexity

86%

Confidentiality

106%

The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.

CWE-476: NULL Pointer Dereference

CVSS 3.0 Base Score 8.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

First reported 9 years ago

2016-03-13 18:59:00

Last updated 5 years ago

2019-12-27 16:08:00

Affected Software

Mozilla Firefox

Mozilla Firefox ESR 38.0

38.0

Mozilla Firefox ESR 38.0.1

38.0.1

Mozilla Firefox ESR 38.0.5

38.0.5

Mozilla Firefox ESR 38.1.0

38.1.0

Mozilla Firefox ESR 38.1.1

38.1.1

Mozilla Firefox ESR 38.2.0

38.2.0

Mozilla Firefox ESR 38.2.1

38.2.1

Mozilla Firefox Extended Support Release (ESR) 38.3.0

38.3.0

Mozilla Firefox ESR 38.4.0

38.4.0

Mozilla Firefox ESR 38.5.0

38.5.0

Mozilla Firefox ESR 38.5.1

38.5.1

Mozilla Firefox Extended Support Release (ESR) 38.6.0

38.6.0

Mozilla Firefox Extended Support Release (ESR) 38.6.1

38.6.1

Mozilla Thunderbird

OpenSUSE 13.1

13.1

References

http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e

SUSE-SU-2016:0727

openSUSE-SU-2016:0731

openSUSE-SU-2016:0733

SUSE-SU-2016:0777

SUSE-SU-2016:0820

openSUSE-SU-2016:0876

openSUSE-SU-2016:0894

Third Party Advisory

SUSE-SU-2016:0909

DSA-3510

DSA-3520

http://www.mozilla.org/security/announce/2016/mfsa2016-31.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html