CVE-2016-5290 Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploite...
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 45.5.0esr-1 | 45.5.0esr-1 |
| debian/firefox-esr(Debian:13) | < 45.5.0esr-1 | 45.5.0esr-1 |
| debian/firefox-esr(Debian:14) | < 45.5.0esr-1 | 45.5.0esr-1 |
| mozilla Firefox | < 45.5.0 | 45.5.0 |
| mozilla Firefox | < 50.0 | 50.0 |
| mozilla Thunderbird | < 45.5.0 | 45.5.0 |
| debian linux | = 8.0 | No fix listed |
| mozilla Thunderbird | < 45.5 | 45.5 |
| mozilla firefox esr | < 45.5 | 45.5 |
| mozilla Firefox | < 50 | 50 |
References
- Debian Security Tracker CVE-2016-5290 vendor-advisory
- RHSA-2016:2780 third-party-advisory vendor-advisory
- RHSA-2016:2825 third-party-advisory vendor-advisory
- 94335 third-party-advisory vdb-entry
- 1037298 third-party-advisory vdb-entry
- bugzilla.mozilla.org vendor-advisory
- GLSA-201701-15 third-party-advisory vendor-advisory
- DSA-3730 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory