Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://www.mozilla.org/security/announce/2016/mfsa2016-16.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1245866 - http://www.ubuntu.com/usn/USN-2917-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1224363 - https://bugzilla.mozilla.org/show_bug.cgi?id=1224361 - https://bugzilla.mozilla.org/show_bug.cgi?id=1243555 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1207958 - https://bugzilla.mozilla.org/show_bug.cgi?id=1241731 - http://lists.opensuse
zilla.mozilla.org/show_bug.cgi?id=1207958 - https://bugzilla.mozilla.org/show_bug.cgi?id=1241731 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1247236 - https://bugzilla.mozilla.org/show_bug.cgi?id=1238558 - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - https://bugzilla.mozilla.org/show_bug.cgi?id=1224369 - https://bugzilla.mozilla.org/show_bug.cgi?id=1205163 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=1199171
CVE ID: CVE-2016-1954 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://hg.moz
gram Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236 - https://bugzilla.mozilla.org/show_bug.cgi?id=1243178 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - h
security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://www.mozilla.org/security/announce/2016/mfsa2016-17.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opens
se-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1955 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008
opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1208946 - http://www.ubuntu.com/usn/USN-2917-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://www.mozilla.org/security/announce/2016/mfsa2016-18.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1956 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1199923 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-an
p://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://www.ubuntu.com/usn/USN-2917-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://www.mozilla.org/security/announce/2016/mfsa2016-19.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1957 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - htt
curity-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://www.mozilla.org/security/announce/2016/mfsa2016-20.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-sec
://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1227052 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1958 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.
eases/mozilla-release/rev/80ce3f1ffe03 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1228754 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.mozilla.org/security/announce/2016/mfsa2016-21.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-0
016-21.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1959 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2016/mfsa2016-22.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1234949 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.ubuntu.com/usn/USN-2917-1 - http://
p://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.ubuntu.com/usn/USN-2917-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1960 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:10:40.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.mozilla.org/security/announce/2016/mfsa2
ists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.mozilla.org/security/announce/2016/mfsa2016-23.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1246014 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-secur
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://www.exploit-db.com/exploits/44294/ - http://zerodayinitiative.com/advisories/ZDI-16-198/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-s
curity-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - https://www.exploit-db.com/exploits/42484/ - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1961 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-s
html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-0
/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2016/mfsa2016-24.html - http://www.ubuntu.com/usn/USN-2934-1 - http://zerodayinitiative.
w.mozilla.org/security/announce/2016/mfsa2016-24.html - http://www.ubuntu.com/usn/USN-2934-1 - http://zerodayinitiative.com/advisories/ZDI-16-199/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1249377 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1962 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://www.oracle.com/technetwork/topics/security/linu
s.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - https://bugzilla.mozilla.org/show_bug.cgi?id=1240760 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.mozilla.org/security/announce/2016/mfsa2016-25.html - http://www.debian.org/security/201
6-03/msg00093.html - http://www.mozilla.org/security/announce/2016/mfsa2016-25.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1963 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1238440 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.mozilla.org/security/announce/2016/mfsa2016-26.html - http://lists.opensuse.org/opensus
.com/usn/USN-2917-1 - http://www.mozilla.org/security/announce/2016/mfsa2016-26.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1964 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1243335 - http://www.mozilla.org/security/announce/2016/mfsa2016-
91.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1243335 - http://www.mozilla.org/security/announce/2016/mfsa2016-27.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/
6-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - http://www.ubuntu.com/usn/USN-291
- https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1965 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://www.oracle.com/technetwork/topics/securit
//lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1245264 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.secur
g/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2016/mfsa2016-28.html - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1966 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1246054 - http://www.mozilla.org/security/