CVE-2016-9079

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

Debian Linux

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

11. Jun 2018

Ausgewertete Quellen

• Debian
  https://www.debian.org/security/2016/dsa-3730
• Mozilla
  https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
• Mozilla
  https://www.mozilla.org/security/advisories/mfsa2016-92/
• Red Hat
  http://rhn.redhat.com/errata/RHSA-2016-2843.html
• Red Hat
  http://rhn.redhat.com/errata/RHSA-2016-2850.html
• Hinweis
  http://www.securityfocus.com/bid/94591
• Hinweis
  http://www.securitytracker.com/id/1037370
• Hinweis
  https://security.gentoo.org/glsa/201701-15
• Hinweis
  https://security.gentoo.org/glsa/201701-35
• Hinweis
  https://www.exploit-db.com/exploits/41151/
• Hinweis
  https://www.exploit-db.com/exploits/42327/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079
• CISA
  Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
• NVD
  CVE-2016-9079