CVE-2016-5259 in Firefox

Resumen (Inglés)

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 2016-06-03
• Divulgación: 2016-08-04
• Moderación: Entrada de VulDB creada
• Voces: 1
• CPE: listo
• CWE: CWE-416 (Confirmado)
• CVSS: 8.8
• EPSS: 0.01150
• Actividades: Muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5259
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5259
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5259/