Vulnerability CVE-2016-1960

Vulnerability CVE-2016-1960

Published: 2016-03-13

Description:

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.

See advisories in our WLB2 database:

	Topic	Author	Date
High	Firefox 44.0.2 ASM.JS JIT-Spray Remote Code Execution	Rh0	18.03.2018

Type:

CWE-Other

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
SUSE -> Linux enterprise
Oracle -> Linux
Opensuse -> LEAP
Opensuse -> Opensuse
Novell -> Opensuse
Novell -> LEAP
Mozilla -> Firefox
Mozilla -> Firefox esr
Mozilla -> Thunderbird

References:

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html

http://www.debian.org/security/2016/dsa-3510

http://www.debian.org/security/2016/dsa-3520

http://www.mozilla.org/security/announce/2016/mfsa2016-23.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.securitytracker.com/id/1035215

http://www.ubuntu.com/usn/USN-2917-1

http://www.ubuntu.com/usn/USN-2917-2

http://www.ubuntu.com/usn/USN-2917-3

http://www.ubuntu.com/usn/USN-2934-1

http://zerodayinitiative.com/advisories/ZDI-16-198/

https://bugzilla.mozilla.org/show_bug.cgi?id=1246014

https://security.gentoo.org/glsa/201605-06

https://www.exploit-db.com/exploits/42484/

https://www.exploit-db.com/exploits/44294/

Vulnerability CVE-2016-1960

See advisories in our WLB2 database:

High

Firefox 44.0.2 ASM.JS JIT-Spray Remote Code Execution

CWE-Other

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

6.8/10

6.4/10

8.6/10

Remote

Medium

No required

Partial

Partial

Partial

Affected software

References: