CVE-2016-1960

Advisory lineage Upstream: 0 Downstream: 18
Modified
Published: 13 Mar 2016, 18:00
Last modified:05 Aug 2024, 23:10

Vulnerability Summary

Overall Risk (default)
high
62/100
CVSS Score
8.8 HIGH
v3.0 (nvd)
EPSS Score
86.45% CRITICAL
86% probability -0.60%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

13 Mar 2016, 18:00
Published
Vulnerability first disclosed
05 Aug 2024, 23:10
Last Modified
Vulnerability information updated

Description

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.

CVSS Metrics

  • v3.0•HIGH•Score: 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 86.45%• Percentile: 99%

Affected Systems

  • mozilla•firefox

    ≤ 44.0.2 | 38.0 | 38.0.1 | 38.0.5 | 38.1.0 | 38.1.1 | 38.2.0 | 38.2.1 | 38.3.0 | 38.4.0 | 38.5.0 | 38.5.1 | 38.6.0 | 38.6.1

  • mozilla•thunderbird

    ≤ 38.6.0

  • opensuse•leap

    42.1

  • opensuse•opensuse

    13.1 | 13.2

  • oracle•linux

    5.0 | 6 | 7

  • suse•linux_enterprise

    12.0

References (25)