Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-2821

Опубликовано: 08 июн. 2016
Источник: redhat
CVSS2: 5.1
EPSS Низкий

Описание

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5thunderbirdNot affected
Red Hat Enterprise Linux 6thunderbirdNot affected
Red Hat Enterprise Linux 7thunderbirdNot affected
Red Hat Enterprise Linux 5firefoxFixedRHSA-2016:121708.06.2016
Red Hat Enterprise Linux 6firefoxFixedRHSA-2016:121708.06.2016
Red Hat Enterprise Linux 7firefoxFixedRHSA-2016:121708.06.2016

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1342892Mozilla: Use-after-free deleting tables from a contenteditable document (MFSA 2016-51)

EPSS

Процентиль: 85%
0.02755
Низкий

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 9 лет назад

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

CVSS3: 7.5
nvd
около 9 лет назад

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

CVSS3: 7.5
debian
около 9 лет назад

Use-after-free vulnerability in the mozilla::dom::Element class in Moz ...

CVSS3: 7.5
github
больше 3 лет назад

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

oracle-oval
около 9 лет назад

ELSA-2016-1217: firefox security update (CRITICAL)

EPSS

Процентиль: 85%
0.02755
Низкий

5.1 Medium

CVSS2