Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9079

Опубликовано: 01 дек. 2016
Источник: redhat
CVSS3: 7.3
CVSS2: 6.8
EPSS Высокий

Описание

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=1400376Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)

EPSS

Процентиль: 99%
0.84964
Высокий

7.3 High

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 7 лет назад

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

CVSS3: 7.5
nvd
около 7 лет назад

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

CVSS3: 7.5
debian
около 7 лет назад

A use-after-free vulnerability in SVG Animation has been discovered. A ...

suse-cvrf
почти 9 лет назад

Security update for Mozilla Thunderbird

suse-cvrf
почти 9 лет назад

Security update for MozillaFirefox

EPSS

Процентиль: 99%
0.84964
Высокий

7.3 High

CVSS3

6.8 Medium

CVSS2