CVE-2016-5292

Опубликовано: 15 нояб. 2016

Источник: redhat

CVSS3: 5.6

CVSS2: 5.1

EPSS Низкий

Описание

During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox < 50.

Отчет

This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	firefox	Not affected
Red Hat Enterprise Linux 5	thunderbird	Not affected
Red Hat Enterprise Linux 6	firefox	Not affected
Red Hat Enterprise Linux 6	thunderbird	Not affected
Red Hat Enterprise Linux 7	firefox	Not affected
Red Hat Enterprise Linux 7	thunderbird	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1395057Mozilla: URL parsing causes crash (MFSA 2016-89)

EPSS

Процентиль: 72%

0.01509

Низкий

5.6 Medium

CVSS3

5.1 Medium

CVSS2

Связанные уязвимости

CVE-2016-5292

CVSS3: 6.5

ubuntu

около 8 лет назад

During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox < 50.

CVE-2016-5292

CVSS3: 6.5

nvd

около 8 лет назад

During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox < 50.

CVE-2016-5292

CVSS3: 6.5

debian

около 8 лет назад

During URL parsing, a maliciously crafted URL can cause a potentially ...

GHSA-crcr-jcjm-54w8

CVSS3: 6.5

github

больше 4 лет назад

During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox < 50.

openSUSE-SU-2016:2861-1

suse-cvrf

почти 10 лет назад

Security update for MozillaFirefox, mozilla-nss

EPSS

Процентиль: 72%

0.01509

Низкий

5.6 Medium

CVSS3

5.1 Medium

CVSS2