Veracode Vulnerability DatabaseVERACODE:17619User-After-Free
EPSS
Percentile
93.1%
firefox is vulnerable to use-after-free vulnerability. The vulnerability exists in the nsRefreshDriver::Tick function. Remote attackers can execute arbitrary code by leveraging improper interaction between timeline destruction handler and the Web Animations model implementation which results in denial of service attacks.
References
rhn.redhat.com/errata/RHSA-2016-1912.html
www.debian.org/security/2016/dsa-3674
www.mozilla.org/security/announce/2016/mfsa2016-85.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
www.securityfocus.com/bid/93049
www.securitytracker.com/id/1036852
access.redhat.com/security/updates/classification/#critical
bugzilla.mozilla.org/show_bug.cgi?id=1291665
rhn.redhat.com/errata/RHSA-2016-1912.html
security.gentoo.org/glsa/201701-15
www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr45.4
www.mozilla.org/security/advisories/mfsa2016-86/
www.mozilla.org/security/advisories/mfsa2016-88/
Related
