Lucene search

K
nessusTenable9852.PRM
HistoryJan 05, 2017 - 12:00 a.m.

Mozilla Firefox ESR < 45.5.1 RCE

2017-01-0500:00:00
Tenable
www.tenable.com
15

Versions of Mozilla Firefox ESR earlier than 45.5.1 are unpatched for a use-after-free condition in ‘dom/smil/nsSMILTimeContainer.cpp’ that is triggered when handling SVG animations. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and execute arbitrary code.

Binary data 9852.prm
VendorProductVersionCPE
mozillafirefox_esrcpe:/a:mozilla:firefox_esr