Buffer Overflow

2019-05-0205:24:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.007 Low

EPSS

Percentile

81.0%

JSON

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2016-1930, CVE-2016-1935) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, and Aki Helin as the original reporters of these issues. All Firefox users should upgrade to these updated packages, which contain Firefox version 38.6.0 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

CPENameOperatorVersion
firefoxeq3.6.17__1.el6_0
firefoxeq24.4.0__1.el6_5
firefoxeq10.0.5__1.el6_2
firefoxeq10.0.8__1.el6_3
firefoxeq1.5.0.12__15.el5_1
firefoxeq3.6.14__4.el6_0
firefoxeq3.6.26__1.el5_7
firefoxeq17.0.10__1.el6_4
firefoxeq38.0__4.el5_11
firefoxeq38.1.1__1.el6_7

Name	Operator	Version
firefox	eq	3.6.17__1.el6_0
firefox	eq	24.4.0__1.el6_5
firefox	eq	10.0.5__1.el6_2
firefox	eq	10.0.8__1.el6_3
firefox	eq	1.5.0.12__15.el5_1
firefox	eq	3.6.14__4.el6_0
firefox	eq	3.6.26__1.el5_7
firefox	eq	17.0.10__1.el6_4
firefox	eq	38.0__4.el5_11
firefox	eq	38.1.1__1.el6_7