← back
CVE-2016-2819

CVE-2016-2819

EPSS 24.0%
Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/44293/unverifiedexploitdbwww.exploit-db.com/exploits/44293unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.htmlhttps://access.redhat.com/errata/RHSA-2016:1217https://bugzilla.mozilla.org/show_bug.cgi?id=1270381https://www.exploit-db.com/exploits/44293/http://www.debian.org/security/2016/dsa-3600http://www.mozilla.org/security/announce/2016/mfsa2016-50.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlhttp://www.securityfocus.com/bid/91075http://www.securitytracker.com/id/1036057http://www.ubuntu.com/usn/USN-2993-1