CVE-2016-5290

Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

CVSS Metrics

Affected Products (4)

GitHub Security Advisory GHSA-qf56-xjg6-qx59

Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...

References (20)

• http://rhn.redhat.com/errata/RHSA-2016-2780.html Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2825.html Third Party Advisory
• http://www.securityfocus.com/bid/94335 Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037298 Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1309720%2C1297062%2C1303710%2C1018486%2C1292590%2C1301343%2C1301496%2C1308048%2C1308346%2C1299519%2C1286911%2C1298169 Vendor Advisory
• https://security.gentoo.org/glsa/201701-15 Third Party Advisory
• https://www.debian.org/security/2016/dsa-3730 Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-89/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-90/ Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-93/ Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2780.html Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2825.html Third Party Advisory
• http://www.securityfocus.com/bid/94335 Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037298 Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1309720%2C1297062%2C1303710%2C1018486%2C1292590%2C1301343%2C1301496%2C1308048%2C1308346%2C1299519%2C1286911%2C1298169 Vendor Advisory