Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10759
HistoryFeb 11, 2016 - 12:00 a.m.

KLA10759 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

2016-02-1100:00:00
Kaspersky Lab
threats.kaspersky.com
36

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.03 Low

EPSS

Percentile

90.7%

JSON

Detect date:

02/11/2016

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information.

Affected products:

Mozilla Firefox versions earlier than 44.0.2
Mozilla Firefox ESR versions ealrier than 38.6.1

Solution:

Update to the latest version
Get Firefox ESR
Get Firefox

Original advisories:

Mozilla advisory
Mozilla advisory

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2016-15234.3Warning
CVE-2016-15229.3Critical
CVE-2016-15216.8High
CVE-2016-19496.8High
CVE-2016-15265.8High

Related

fedora 2
nessus 42
mageia 2
openvas 38
f5 2
freebsd 2
redhat 5
suse 5
osv 2
ibm 3
centos 4
oraclelinux 2
ubuntu 3
amazon 1
veracode 4
gentoo 3
debian 3
prion 5
talos 5
cve 5
debiancve 5
ubuntucve 5
archlinux 2
mozilla 2
fedora
fedora
[SECURITY] Fedora 22 Update: graphite2-1.3.6-1.fc22
2016-05-10 18:00:28
[SECURITY] Fedora 23 Update: graphite2-1.3.5-1.fc23
2016-02-21 16:32:47
nessus
nessus
openSUSE Security Update : graphite2 (openSUSE-2016-349)
2016-03-17 00:00:00
RHEL 7 : graphite2 (RHSA-2016:0594)
2016-04-07 00:00:00
Amazon Linux AMI : graphite2 (ALAS-2016-696)
2016-05-04 00:00:00
mageia
mageia
Updated graphite2/firefox packages fix security vulnerability
2016-02-17 22:06:01
Updated thunderbird packages fix security vulnerability
2016-02-17 22:06:01
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2016-696)
2016-05-09 00:00:00
Debian: Security Advisory (DSA-3479-1)
2016-02-14 00:00:00
Mageia: Security Advisory (MGASA-2016-0077)
2016-02-18 00:00:00
f5
f5
K74435036 : libGraphite vulnerabilities
2016-02-23 00:00:00
SOL74435036 - libGraphite vulnerabilities
2016-02-22 00:00:00
freebsd
freebsd
graphite2 -- code execution vulnerability
2016-02-05 00:00:00
firefox -- Same-origin-policy violation using Service Workers with plugins
2016-02-11 00:00:00
redhat
redhat
(RHSA-2016:22711) Important: graphite2 security, bug fix, and enhancement update
2016-02-16 05:00:00
(RHSA-2016:0594) Important: graphite2 security, bug fix, and enhancement update
2016-04-05 17:05:00
(RHSA-2016:0197) Critical: firefox security update
2016-02-16 00:00:00
suse
suse
Security update for graphite2 (important)
2016-03-16 19:13:03
Security update for graphite2 (important)
2016-03-15 21:12:11
Security update for graphite2 (important)
2016-03-24 15:08:34
osv
osv
graphite2 - security update
2016-02-15 00:00:00
iceweasel - security update
2016-02-14 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Mozilla Firefox libgraphite affect PowerKVM (CVE-2016-1521, CVE-2016-1522, CVE-2016-1523, CVE-2016-1526)
2018-06-18 01:32:18
Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified.
2018-06-18 00:28:02
Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS
2018-06-18 00:28:02
centos
centos
graphite2 security update
2016-04-05 20:02:28
firefox security update
2016-02-17 00:14:36
thunderbird security update
2016-02-18 17:19:24
oraclelinux
oraclelinux
graphite2 security, bug fix, and enhancement update
2016-04-05 00:00:00
firefox security update
2016-02-16 00:00:00
ubuntu
ubuntu
graphite2 vulnerabilities
2016-02-17 00:00:00
Firefox vulnerability
2016-02-11 00:00:00
Thunderbird vulnerabilities
2016-03-08 00:00:00
amazon
amazon
Important: graphite2
2016-05-03 10:30:00
veracode
veracode
Heap-Based Buffer Overflow
2019-05-02 05:24:42
Denial Of Service (DoS)
2019-05-02 05:24:42
Remote Code Execution (RCE)
2019-01-15 09:10:31
gentoo
gentoo
Mozilla SeaMonkey: Multiple vulnerabilities
2017-01-13 00:00:00
Graphite: Multiple vulnerabilities
2017-01-24 00:00:00
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
debian
debian
[SECURITY] [DSA 3479-1] graphite2 security update
2016-02-15 22:43:32
[SECURITY] [DSA 3477-1] iceweasel security update
2016-02-14 11:57:08
[SECURITY] [DSA 3491-1] icedove security update
2016-02-24 22:03:08
prion
prion
Heap overflow
2016-02-13 02:59:00
Design/Logic Flaw
2016-02-13 02:59:00
Out-of-bounds
2016-02-13 02:59:00
talos
talos
Libgraphite Bidirectional Font BracketPairStack Code Execution Vulnerability
2016-02-05 00:00:00
Libgraphite Bidirectional Font mFeatureMap Denial of Service Vulnerability
2016-02-05 00:00:00
Libgraphite Context Item Code Execution Vulnerability
2016-02-05 00:00:00
cve
cve
CVE-2016-1522
2016-02-13 02:59:00
CVE-2016-1949
2016-02-13 02:59:00
CVE-2016-1526
2016-02-13 02:59:00
debiancve
debiancve
CVE-2016-1949
2016-02-13 02:59:00
CVE-2016-1522
2016-02-13 02:59:00
CVE-2016-1526
2016-02-13 02:59:00
ubuntucve
ubuntucve
CVE-2016-1522
2016-02-08 00:00:00
CVE-2016-1949
2016-02-11 00:00:00
CVE-2016-1526
2016-02-08 00:00:00
archlinux
archlinux
firefox: same-origin policy bypass
2016-02-13 00:00:00
thunderbird: multiple issues
2016-02-21 00:00:00
mozilla
mozilla
Same-origin-policy violation using Service Workers with plugins — Mozilla
2016-02-11 00:00:00
Vulnerabilities in Graphite 2 — Mozilla
2016-02-11 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.03 Low

EPSS

Percentile

90.7%

JSON
Related for KLA10759
fedora2nessus42mageia2openvas38f52freebsd2redhat5suse5osv2ibm3centos4oraclelinux2ubuntu3amazon1veracode4gentoo3debian3prion5talos5cve5debiancve5ubuntucve5archlinux2mozilla2