9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.3%
Atte Kettunen discovered an out-of-bounds read when handling certain
Content Security Policy (CSP) directives in some circumstances. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via application
crash. (CVE-2016-2827)
Christoph Diehl, Christian Holler, Gary Kwong, Nathan Froyd, Honza Bambas,
Seth Fowler, Michael Smith, Andrew McCreight, Dan Minor, Byron Campen, Jon
Coppeard, Steve Fink, Tyson Smith, and Carsten Book discovered multiple
memory safety issues in Firefox. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit these to
cause a denial of service via application crash, or execute arbitrary
code. (CVE-2016-5256, CVE-2016-5257)
Atte Kettunen discovered a heap buffer overflow during text conversion
with some unicode characters. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit this to
cause a denial of service via application crash, or execute arbitrary
code. (CVE-2016-5270)
Abhishek Arya discovered an out of bounds read during the processing of
text runs in some circumstances. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit this to
cause a denial of service via application crash. (CVE-2016-5271)
Abhishek Arya discovered a bad cast when processing layout with input
elements in some circumstances. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit this to
cause a denial of service via application crash, or execute arbitrary
code. (CVE-2016-5272)
A crash was discovered in accessibility. If a user were tricked in to
opening a specially crafted website, an attacker could potentially
exploit this to execute arbitrary code. (CVE-2016-5273)
A use-after-free was discovered in web animations during restyling. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via
application crash, or execute arbitrary code. (CVE-2016-5274)
A buffer overflow was discovered when working with empty filters during
canvas rendering. If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to cause a denial of
service via application crash, or execute arbitrary code. (CVE-2016-5275)
A use-after-free was discovered in accessibility. If a user were tricked
in to opening a specially crafted website, an attacker could potentially
exploit this to cause a denial of service via application crash, or
execute arbitrary code. (CVE-2016-5276)
A use-after-free was discovered in web animations when destroying a
timeline. If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to cause a denial of
service via application crash, or execute arbitrary code. (CVE-2016-5277)
A buffer overflow was discovered when encoding image frames to images in
some circumstances. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to cause a
denial of service via application crash, or execute arbitrary code.
(CVE-2016-5278)
Rafael Gieschke discovered that the full path of files is available to web
pages after a drag and drop operation. An attacker could potentially
exploit this to obtain sensitive information. (CVE-2016-5279)
Mei Wang discovered a use-after-free when changing text direction. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via
application crash, or execute arbitrary code. (CVE-2016-5280)
Brian Carpenter discovered a use-after-free when manipulating SVG content
in some circumstances. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to cause a
denial of service via application crash, or execute arbitrary code.
(CVE-2016-5281)
Richard Newman discovered that favicons can be loaded through
protocols not in the allowlist, such as jar:. (CVE-2016-5282)
Gavin Sharp discovered a timing attack vulnerability involving document
resizes and link colours. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to obtain
sensitive information. (CVE-2016-5283)
An issue was discovered with the preloaded Public Key Pinning (HPKP). If
a machine-in-the-middle (MITM) attacker was able to obtain a fraudulent
certificate for a Mozilla site, they could exploit this by providing
malicious addon updates. (CVE-2016-5284)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 16.04 | noarch | firefox | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-dbg | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-dbgsym | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-dev | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-globalmenu | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-locale-af | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-locale-an | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-locale-ar | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-locale-as | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | firefox-locale-ast | < 49.0+build4-0ubuntu0.16.04.1 | UNKNOWN |
ubuntu.com/security/CVE-2016-2827
ubuntu.com/security/CVE-2016-5256
ubuntu.com/security/CVE-2016-5257
ubuntu.com/security/CVE-2016-5270
ubuntu.com/security/CVE-2016-5271
ubuntu.com/security/CVE-2016-5272
ubuntu.com/security/CVE-2016-5273
ubuntu.com/security/CVE-2016-5274
ubuntu.com/security/CVE-2016-5275
ubuntu.com/security/CVE-2016-5276
ubuntu.com/security/CVE-2016-5277
ubuntu.com/security/CVE-2016-5278
ubuntu.com/security/CVE-2016-5279
ubuntu.com/security/CVE-2016-5280
ubuntu.com/security/CVE-2016-5281
ubuntu.com/security/CVE-2016-5282
ubuntu.com/security/CVE-2016-5283
ubuntu.com/security/CVE-2016-5284
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.082 Low
EPSS
Percentile
94.3%