Veille CVE
CVE-2016-9079
7.5 Élevée Exploitée activementCatalogue CISA KEV — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Ajoutée le 22/06/2023 · Échéance de correction (agences US) : 13/07/2023
Action requise : Apply updates per vendor instructions.
Description
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | 7.5 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | 5.0 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Faiblesses (CWE)
Références
- http://rhn.redhat.com/errata/RHSA-2016-2843.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2850.html Third Party Advisory
- http://www.securityfocus.com/bid/94591 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037370 Third Party AdvisoryVDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066 ExploitIssue TrackingVendor Advisory
- https://security.gentoo.org/glsa/201701-15 Third Party Advisory
- https://security.gentoo.org/glsa/201701-35 Third Party Advisory
- https://www.debian.org/security/2016/dsa-3730 Third Party Advisory
- https://www.exploit-db.com/exploits/41151/ ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42327/ ExploitThird Party AdvisoryVDB Entry
- https://www.mozilla.org/security/advisories/mfsa2016-92/ Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2843.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2850.html Third Party Advisory
- http://www.securityfocus.com/bid/94591 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037370 Third Party AdvisoryVDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066 ExploitIssue TrackingVendor Advisory
- https://security.gentoo.org/glsa/201701-15 Third Party Advisory
- https://security.gentoo.org/glsa/201701-35 Third Party Advisory
- https://www.debian.org/security/2016/dsa-3730 Third Party Advisory
- https://www.exploit-db.com/exploits/41151/ ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42327/ ExploitThird Party AdvisoryVDB Entry
- https://www.mozilla.org/security/advisories/mfsa2016-92/ Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079 US Government Resource