Lucene search
K

7 matches found

Veracode
Veracode
added 2019/05/02 5:49 a.m.19 views

Arbitrary Code Execution

firefox is vulnerable to use-after-free vulnerability. The vulnerability exists in the mozilla::a11y::DocAccessible::ProcessInvalidationList function. Remote attackers can execute arbitrary code via an aria-owns attribute which affects the availability causing a denial of service DOS attacks...

9.8CVSS9.4AI score0.03932EPSS
Exploits0References13Affected Software1
NVD
NVD
added 2016/09/22 10:59 p.m.14 views

CVE-2016-5276

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

9.8CVSS9.6AI score0.03932EPSS
Exploits0References10
OSV
OSV
added 2016/09/22 10:59 p.m.1 views

DEBIAN-CVE-2016-5276

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

9.8CVSS9AI score0.03932EPSS
Exploits0References1
Cvelist
Cvelist
added 2016/09/22 10:0 p.m.20 views

CVE-2016-5276

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

9.5AI score0.03932EPSS
Exploits0References10
Debian CVE
Debian CVE
added 2016/09/22 10:0 p.m.23 views

CVE-2016-5276

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

9.8CVSS10AI score0.03932EPSS
Exploits0
OSV
OSV
added 2016/09/22 12:0 a.m.2 views

UBUNTU-CVE-2016-5276

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

9.8CVSS7.7AI score0.03932EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2016/09/20 5:49 p.m.20 views

CVE-2016-5276

Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an...

9.8CVSS7.7AI score0.03932EPSS
Exploits0References2
Rows per page
Query Builder