deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0999
Published: 2016-03-12
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-1000.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
CVE: CVE-2016-1000
Published: 2016-03-12
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-0999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
CVE: CVE-2016-1001
Published: 2016-03-12
Description: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
CVE: CVE-2016-1002
Published: 2016-03-12
Description: Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
CVE: CVE-2016-1005
Published: 2016-03-12
Description: Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1002.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
CVE: CVE-2016-1010
Published: 2016-03-12
Description: Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
CVE: CVE-2016-0815
Published: 2016-03-12
Description: The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26365349.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84235; https://android.googlesource.com/platform%2Fframeworks%2Fav/+/5403587a74aee2fb57076528c[PII_REDACTED]c8afb
CVE: CVE-2016-0816
Published: 2016-03-12
Description: mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84235; https://android.googlesource.com/platform/external/libavc/+/4a524d3a8ae9aa20c36430008e6bd429443f8f1d
CVE: CVE-2016-0818
Published: 2016-03-12
Description: The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-254, CWE-345
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84245; https://android.googlesource.com/platform/external/conscrypt/+/4c9f9c2201116acf790fca25af43995d29980ee0
CVE: CVE-2016-0819
Published: 2016-03-12
Description: The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 25364034.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84250; http://source.android.com/security/bulletin/2016-03-01.html
CVE: CVE-2016-0820
Published: 2016-03-12
Description: The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84257; http://source.android.com/security/bulletin/2016-03-01.html
CVE: CVE-2016-0821
Published: 2016-03-12
Description: The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8a5e5e02fc83aaf67053ab53b359af08c6c49aaf; http://source.android.com/security/bulletin/2016-03-01.html; http://www.debian.org/security/2016/dsa-3607
CVE: CVE-2016-0822
Published: 2016-03-12
Description: The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84263; http://source.android.com/security/bulletin/2016-03-01.html
CVE: CVE-2016-0823
Published: 2016-03-12
Description: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce; http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html; http://source.android.com/security/bulletin/2016-03-01.html
CVE: CVE-2016-0824
Published: 2016-03-12
Description: libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-254
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84262; https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3
CVE: CVE-2016-0825
Published: 2016-03-12
Description: The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-254
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84269; http://source.android.com/security/bulletin/2016-03-01.html
CVE: CVE-2016-0826
Published: 2016-03-12
Description: libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26265403.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84268; https://android.googlesource.com/platform/frameworks/av/+/899823966e78552bb6dfd7772403a4f91471d2b0
CVE: CVE-2016-0827
Published: 2016-03-12
Description: Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, related to EffectBundle.cpp and EffectReverb.cpp, aka internal bug 26347509.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84268; https://android.googlesource.com/platform/frameworks/av/+/9e29523b9537983b4c4b205ff868d0b3bca0383b
CVE: CVE-2016-0828
Published: 2016-03-12
Description: The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an ATTACH_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338113.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-254
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84261; https://android.googlesource.com/platform/frameworks/native/+/dded8fdbb700d6cc498debc69a780915bc34d755
CVE: CVE-2016-0829
Published: 2016-03-12
Description: The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initialize a certain output data structure, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering a QUEUE_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338109.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-254
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84261; https://android.googlesource.com/platform/frameworks/native/+/d06421fd37fbb7fd07002e6738fac3a223cb1a62
CVE: CVE-2016-0830
Published: 2016-03-12
Description: btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries, and consequently exceeding the maximum size of a configuration file, aka internal bug 26071376.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84270; https://android.googlesource.com/platform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5
CVE: CVE-2016-0831
Published: 2016-03-12
Description: The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25778215.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84266; https://android.googlesource.com/platform/frameworks/opt/telephony/+/79eecef63f3ea99688333c19e22813f54d4a31b1
CVE: CVE-2016-0832
Published: 2016-03-12
Description: Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25955042.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-254, CWE-264
References: http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84264; http://source.android.com/security/bulletin/2016-03-01.html
CVE: CVE-2016-1621
Published: 2016-03-12
Description: libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179128.html; http://source.android.com/security/bulletin/2016-03-01.html; http://www.securityfocus.com/bid/84239
CVE: CVE-2016-1950
Published: 2016-03-13
Description: Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2016-1952
Published: 2016-03-13
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
CVE: CVE-2016-1953
Published: 2016-03-13
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
CVE: CVE-2016-1954
Published: 2016-03-13
Description: The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
CVE: CVE-2016-1955
Published: 2016-03-13
Description: Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
CVE: CVE-2016-1956
Published: 2016-03-13
Description: Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
CVE: CVE-2016-1957
Published: 2016-03-13
Description: Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
CVE: CVE-2016-1958
Published: 2016-03-13
Description: browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
CVE: CVE-2016-1959
Published: 2016-03-13
Description: The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html; http://www.mozilla.org/security/announce/2016/mfsa2016-22.html
CVE: CVE-2016-1960
Published: 2016-03-13
Description: Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
CVE: CVE-2016-1961
Published: 2016-03-13
Description: Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.
CVSS Score: 8.8 (HIGH)
References: http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
CVE: CVE-2016-1962
Published: 2016-03-13
Description: Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
CVE: CVE-2016-1963
Published: 2016-03-13
Description: The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-119, CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html; http://www.mozilla.org/security/announce/2016/mfsa2016-26.html
CVE: CVE-2016-1964
Published: 2016-03-13
Description: Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html