Popis
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information and spoof user interface.
Below is a complete list of vulnerabilities:
- A heap buffer overflow vulnerability Cairo can be exploited remotely to cause denial of service;
- An unspecified vulnerability can be exploited remotely via specially crafted URL to cause denial of service;
- An integer overflow vulnerability can be in JavaScript can be exploited remotely to cause denial of service;
- A buffer overflow vulnerability can be exploited remotely to cause denial of service;
- Multiple use-after-free vulnerabilities can be exploited remotely to cause denial of service;
- An unspecified vulnerability in WebExtentions can be exploited remotely via mozAddonManager API to gain privileges;
- A same-origin policy bypass can be exploited remotely to obtain sensitive information;
- Unspecified vulnerability can be exploited remotely via Mozilla Maintenance Service to gain privileges;
- An unspecified vulnerability can be exploited remotely via select dropdown menu to spoof user interface.
Oficiální doporučení
Vykořisťování
Public exploits exist for this vulnerability.
Související produkty
seznam CVE
- CVE-2016-5289 critical
- CVE-2016-5290 critical
- CVE-2016-5291 high
- CVE-2016-5292 high
- CVE-2016-5293 high
- CVE-2016-5294 high
- CVE-2016-5295 critical
- CVE-2016-5296 critical
- CVE-2016-5297 critical
- CVE-2016-9063 critical
- CVE-2016-9064 high
- CVE-2016-9066 critical
- CVE-2016-9067 high
- CVE-2016-9068 critical
- CVE-2016-9070 critical
- CVE-2016-9071 high
- CVE-2016-9072 critical
- CVE-2016-9073 critical
- CVE-2016-9074 high
- CVE-2016-9075 critical
- CVE-2016-9076 high
- CVE-2016-9077 high
- CVE-2016-9069 critical
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!