FreeBSD4F00DAC0-1E18-4481-95AF-7AAAD63FD303mozilla -- multiple vulnerabilities
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
0.04 Low
EPSS
Percentile
92.1%
Mozilla Foundation reports:
MFSA 2016-01 Miscellaneous memory safety hazards (rv:44.0
/ rv:38.6)
MFSA 2016-02 Out of Memory crash when parsing GIF format
images
MFSA 2016-03 Buffer overflow in WebGL after out of memory
allocation
MFSA 2016-04 Firefox allows for control characters to be
set in cookie names
MFSA 2016-06 Missing delay following user click events in
protocol handler dialog
MFSA 2016-09 Addressbar spoofing attacks
MFSA 2016-10 Unsafe memory manipulation found through
code inspection
MFSA 2016-11 Application Reputation service disabled in
Firefox 43
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | firefox | < 44.0,1 | UNKNOWN |
| FreeBSD | any | noarch | linux-firefox | < 44.0,1 | UNKNOWN |
| FreeBSD | any | noarch | seamonkey | < 2.41 | UNKNOWN |
| FreeBSD | any | noarch | linux-seamonkey | < 2.41 | UNKNOWN |
| FreeBSD | any | noarch | firefox-esr | < 38.6.0,1 | UNKNOWN |
| FreeBSD | any | noarch | libxul | < 38.6.0 | UNKNOWN |
| FreeBSD | any | noarch | thunderbird | < 38.6.0 | UNKNOWN |
| FreeBSD | any | noarch | linux-thunderbird | < 38.6.0 | UNKNOWN |
References
www.mozilla.org/security/advisories/mfsa2016-01/
www.mozilla.org/security/advisories/mfsa2016-02/
www.mozilla.org/security/advisories/mfsa2016-03/
www.mozilla.org/security/advisories/mfsa2016-04/
www.mozilla.org/security/advisories/mfsa2016-06/
www.mozilla.org/security/advisories/mfsa2016-09/
www.mozilla.org/security/advisories/mfsa2016-10/
www.mozilla.org/security/advisories/mfsa2016-11/
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
0.04 Low
EPSS
Percentile
92.1%