Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-5261

Опубликовано: 05 авг. 2016
Источник: debian
EPSS Низкий

Описание

Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed48.0-1package
firefox-esrfixed45.4.0esr-1package

Примечания

  • For Firefox: https://www.mozilla.org/en-US/security/advisories/mfsa2016-75/

  • For Firefox https://www.mozilla.org/security/advisories/mfsa2016-86/

EPSS

Процентиль: 77%
0.01136
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 9 лет назад

Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.

CVSS3: 8.8
redhat
почти 9 лет назад

Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.

CVSS3: 8.8
nvd
почти 9 лет назад

Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.

CVSS3: 8.8
github
около 3 лет назад

Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.

fstec
почти 9 лет назад

Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 77%
0.01136
Низкий