CVE-2016-5280 in Firefox

Riassunto

di MITRE

Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code via bidirectional text.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 03/06/2016
• Divulgazione: 22/09/2016
• Moderazione: accettato
• Voce: VDB-91880
• CPE: pronto
• CWE: CWE-416 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.04942
• KEV: no
• Attività: molto basso
• Settore: Hospital, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5280
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5280
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5280/