Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-5255

Опубликовано: 05 авг. 2016
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.8

Описание

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.

РелизСтатусПримечание
devel

not-affected

48.0+build2-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [48.0+build2-0ubuntu0.14.04.1]]
precise

released

48.0+build2-0ubuntu0.12.04.1
trusty

released

48.0+build2-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [48.0+build2-0ubuntu0.14.04.1]
upstream

released

48
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

released

48.0+build2-0ubuntu0.16.04.1

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
precise

not-affected

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

not-affected

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

EPSS

Процентиль: 83%
0.02403
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
около 10 лет назад

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.

CVSS3: 8.8
nvd
около 10 лет назад

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.

CVSS3: 8.8
debian
около 10 лет назад

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep ...

CVSS3: 8.8
github
больше 4 лет назад

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.

fstec
около 10 лет назад

Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 83%
0.02403
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3