Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5273 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1280387 - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - http://www.securityfocus.com/bid/93052 - https://security.gentoo.org/glsa/201701-15 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5274 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:49.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1282076 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.moz
ug.cgi?id=1282076 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - http://www.debian.org/security/2016/dsa-3674 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5275 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:49.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - http://www.securityfocus.com/bid/93052 - https://bugzilla.mozilla.org/show_bug.cgi?id=1287316 - https://security.gentoo.org/glsa/201701-15 - http:
om/bid/93052 - https://bugzilla.mozilla.org/show_bug.cgi?id=1287316 - https://security.gentoo.org/glsa/201701-15 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5276 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html -
rk/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1287721 - http://www.debian.org/security/2016/dsa-3674 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5277 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozil
er: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - http://www.debian.org/security/2016/dsa-3674 - https://bugzilla.mozilla.org/show_bug.cgi?id=1291665 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5278 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1294677 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/se
294677 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - http://www.debian.org/security/2016/dsa-3674 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5279 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1249522 - http://www.securityfocus.com/bid/93052 - https://security.gentoo.org/glsa/201701-15 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5280 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via bidirectional text. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1289970 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
work/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - http://www.debian.org/security/2016/dsa-3674 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5281 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1284690 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-8
technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - http://www.geeknik.net/7gr1u98b9 - http://www.debian.org/security/2016/dsa-3674 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5282 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://bugzilla.mozilla.org/show_bug.cgi?id=932335 - http://www.securityfocus.com/bid/93052 - https://security.gentoo.org/glsa/201701-15 - http://www.securitytracker.co
35 - http://www.securityfocus.com/bid/93052 - https://security.gentoo.org/glsa/201701-15 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5283 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:49.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - http://www.securityfocus.com/bid/93052 - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?id=928187 - http://w
/bid/93052 - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?id=928187 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5284 State: PUBLISHED Published: 2016-09-22T22:00:00 Last Updated: 2024-08-06T00:53:48.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/secur
es: - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.mozilla.org/security/announce/2016/mfsa2016-85.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - https://blog.mozilla.org/security/2016/09/16/update-on-add-on-pinning-vulnerability/ - https://hackernoon.com/tor-browser-exposed-anti-privacy-implantation-at-mass-scale-bd68e9eb1e95 - http://www.debian.org/security/2016/dsa-3674 - https://bugzilla.mozilla.org/show_bug.cgi?id=1303127 - http://seclists.org/dailydave/2016/q3/51 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ -
01701-15 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://www.securityfocus.com/bid/93049 - http://www.securitytracker.com/id/1036852
CVE ID: CVE-2016-5285 State: PUBLISHED Published: 2019-11-15T15:44:05 Last Updated: 2024-08-06T00:53:48.923Z Vendors: Mozilla Products: Network Security Services Problem Types: denial of service Description: A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html - http://www.securityfocus.com/bid/94349 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011
49.html - http://www.securityfocus.com/bid/94349 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html - https://security.gentoo.org/glsa/201701-46 - http://rhn.redhat.com/errata/RHSA-2016-2779.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html - http://www.ubuntu.com/usn/USN-3163-1 - https://bto.bluecoat.com/security-advisory/sa137 - https://bugzilla.mozilla.org/show_bug.cgi?id=1306103
CVE ID: CVE-2016-5287 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.980Z Vendors: Mozilla Products: Firefox Problem Types: Crash in nsTArray_base<T>::SwapArrayElements Description: A potentially exploitable use-after-free crash during actor destruction with service workers. This issue does not affect releases earlier than Firefox 49. This vulnerability affects Firefox < 49.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-87/ - http://www.securityfocus.com/bid/93811 - http://www.securitytracker.com/id/1037077 - https://bugzilla.mozilla.org/show_bug.cgi?id=1309823
CVE ID: CVE-2016-5288 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:49.017Z Vendors: Mozilla Products: Firefox Problem Types: Web content can read cache entries Description: Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1310183 - https://www.mozilla.org/security/advisories/mfsa2016-87/ - http://www.securityfocus.com/bid/93810 - http://www.securitytracker.com/id/1037077
CVE ID: CVE-2016-5289 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.959Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 50 Description: Memory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1296649%2C1298107%2C1300129%2C1305876%2C1314667%2C1301252%2C1277866%2C1307254%2C1252511%2C1264053 - http://www.securityfocus.com/bi
298107%2C1300129%2C1305876%2C1314667%2C1301252%2C1277866%2C1307254%2C1252511%2C1264053 - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-5290 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.950Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5 Description: Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - http://rhn.redhat.c
nalyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - http://rhn.redhat.com/errata/RHSA-2016-2825.html - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1309720%2C1297062%2C1303710%2C1018486%2C1292590%2C1301343%2C1301496%2C1308048%2C1308346%2C1299519%2C1286911%2C1298169 - http://www.securityfocus.com/bid/94335 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - http://rhn.redhat.com/errata/RHSA-2016-2780.html - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-5291 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:49.045Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Same-origin policy violation using local HTML file and saved shortcut file Description: A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - https://bugzilla.mozilla.org/show_bug.cgi?id=1292159 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/
illa.mozilla.org/show_bug.cgi?id=1292159 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - http://www.securityfocus.com/bid/94336 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - http://rhn.redhat.com/errata/RHSA-2016-2780.html - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-5292 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.959Z Vendors: Mozilla Products: Firefox Problem Types: URL parsing causes crash Description: During URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - https://bugzilla.mozilla.org/show_bug.cgi?id=1288482 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-5293 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.955Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Write to arbitrary file with Mozilla Updater and Maintenance Service using updater.log hardlink Description: When the Mozilla Updater is run, if the Updater's log file in the working directory points to a hardlink, data can be appended to an arbitrary local file. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox ESR < 45.5 and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/
< 45.5 and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1246945 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - http://www.securityfocus.com/bid/94336 - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-5294 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:49.006Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Arbitrary target directory for result files of update process Description: The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1246972
0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1246972 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - http://www.securityfocus.com/bid/94336 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-5295 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.928Z Vendors: Mozilla Products: Firefox Problem Types: Mozilla Maintenance Service: Ability to read arbitrary files as SYSTEM Description: This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
erability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - https://www.mozilla.org/en-US/security/advisories/mfsa2013-44/ - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1247239
CVE ID: CVE-2016-5296 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.993Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Heap-buffer-overflow WRITE in rasterize_edges_1 Description: A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - https://bugzilla.mozilla.org/show_bug.cgi?id=1292443 - http://www.securitytracker.com/id/1037298 - https://security.g
- https://bugzilla.mozilla.org/show_bug.cgi?id=1292443 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - http://rhn.redhat.com/errata/RHSA-2016-2780.html - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/ - http://www.securityfocus.com/bid/94339
CVE ID: CVE-2016-5297 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T00:53:48.926Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Incorrect argument length checking in JavaScript Description: An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?