Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-5252

Опубликовано: 02 авг. 2016
Источник: redhat
CVSS3: 8.8
CVSS2: 5.1
EPSS Низкий

Описание

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5thunderbirdNot affected
Red Hat Enterprise Linux 6thunderbirdNot affected
Red Hat Enterprise Linux 7thunderbirdNot affected
Red Hat Enterprise Linux 5firefoxFixedRHSA-2016:155103.08.2016
Red Hat Enterprise Linux 6firefoxFixedRHSA-2016:155103.08.2016
Red Hat Enterprise Linux 7firefoxFixedRHSA-2016:155103.08.2016

Показывать по

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1361979Mozilla: Stack underflow during 2D graphics rendering (MFSA 2016-67)

EPSS

Процентиль: 80%
0.01493
Низкий

8.8 High

CVSS3

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

CVSS3: 8.8
nvd
около 9 лет назад

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

CVSS3: 8.8
debian
около 9 лет назад

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function ...

CVSS3: 8.8
github
больше 3 лет назад

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

fstec
около 9 лет назад

Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 80%
0.01493
Низкий

8.8 High

CVSS3

5.1 Medium

CVSS2