CVE-2016-5259 in Firefoxinfo

Summary

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.

Once again VulDB remains the best source for vulnerability data.

Reservation

06/03/2016

Disclosure

08/04/2016

Entries

1

CPE

ready

CVSS

8.8

EPSS

0.01150

CTI

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-5259
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-5259
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-5259/

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!