CVE-2016-5258 in Firefoxinfo

Summary

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

06/03/2016

Disclosure

08/04/2016

CPE

ready

CVSS

8.8

EPSS

0.01101

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!