CVE-2016-2815
Summary
| CVE | CVE-2016-2815 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2016-06-13 10:59:00 UTC |
|---|
| Updated | 2023-09-12 14:55:00 UTC |
|---|
| Description | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Mozilla Firefox Multiple Security Vulnerabilities |
BID |
www.securityfocus.com |
|
| Mozilla Firefox Multiple Flaws Let Remote Users Execute Arbitrary Code, Bypass Security Restrictions, and Obtain Potentially Sensitive Information and Let Local Users Gain Elevated Privileges - SecurityTracker |
SECTRACK |
www.securitytracker.com |
Third Party Advisory |
| 1264300 – Rooting hazard with Maybe<AutoClearTypeInferenceStateOnOOM> in ObjectGroup::sweep |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking |
| [security-announce] SUSE-SU-2016:1691-1: important: Security update for |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| 1245743 – crash in mozilla::ObservedDocShell::PopMarkers |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking |
| 1241896 – Improper usage of ReadBytes in mozilla::net::NetAddr |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking |
| 1243466 – Heap-use-after-free crash [@mozilla::layers::ImageContainer::~ImageContainer] |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking |
| 1271037 – Wrong numOperands in RRegExpMatcher, RRegExpSearcher, and RRegExpTester. |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking |
| [security-announce] openSUSE-SU-2016:1557-1: important: Security update |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| USN-2993-1: Firefox vulnerabilities | Ubuntu |
UBUNTU |
www.ubuntu.com |
Third Party Advisory |
| [security-announce] openSUSE-SU-2016:1769-1: important: Security update |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| [security-announce] openSUSE-SU-2016:1552-1: important: Security update |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| [security-announce] openSUSE-SU-2016:1778-1: important: Security update |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| 1242798 – Assertion failure: tag <= CalleeToken_Script, at js/src/jit/JitFrames.h:34 or Crash [@ hasUncompiledScript] with Debugger |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking |
| Miscellaneous memory safety hazards (rv:47.0 / rv:45.2) — Mozilla |
CONFIRM |
www.mozilla.org |
Vendor Advisory |
| [security-announce] openSUSE-SU-2016:1767-1: important: Security update |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 690285 Free Berkeley Software Distribution (FreeBSD) Security Update for mozilla (8065d37b-8e7c-4707-a608-1b0a2b8509c3)
