{"schemaVersion":3,"id":"CVE-2016-9079","aliases":["MGASA-2016-0410","SUSE-SU-2016:3048-1","RHSA-2016:2843","RHSA-2016:2850","UBUNTU-CVE-2016-9079","DEBIAN-CVE-2016-9079","DSA-3728-1"],"status":"published","duplicateOf":null,"title":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","description":"A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.","dates":{"published":"2018-06-11T21:00:00.000Z","modified":"2025-10-21T23:45:50.578Z","reserved":null,"kevAdded":["2023-06-22T00:00:00.000Z"],"kevDue":["2023-07-13T00:00:00.000Z"]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":7.3,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":10,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.87357,"percentile":0.99756,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":-0.06599999999999939,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.87423},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.87357,"percentile":0.99756}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.87423,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.87536,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.87357,"percentile":0.99756}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2023-06-22T00:00:00.000Z","dueDate":"2023-07-13T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","description":"Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","notes":[{"type":"url","href":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/#CVE-2016-9079","label":"www.mozilla.org/en-US/security/advisories/mfsa2016-92/"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2016-9079","label":"nvd.nist.gov/vuln/detail/CVE-2016-9079"}],"vendor":"Mozilla","product":"Firefox, Firefox ESR, and Thunderbird","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2023-06-22T00:00:00.000Z","dueDate":"2023-07-13T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","description":"Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","notes":[{"type":"url","href":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/#CVE-2016-9079","label":"www.mozilla.org/en-US/security/advisories/mfsa2016-92/"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2016-9079","label":"nvd.nist.gov/vuln/detail/CVE-2016-9079"}],"vendor":"Mozilla","product":"Firefox, Firefox ESR, and Thunderbird","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_B31127018640D240","name":"Exploit Reference (bugzilla.mozilla.org)","source":"reference","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1321066","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"42327","name":"Firefox 50.0.1 - ASM.JS JIT-Spray Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/42327","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"remote","platform":"windows","file":"exploits/windows/remote/42327.html","codes":["CVE-2017-5375","CVE-2016-9079"]},"metasploit":null},{"id":"41151","name":"Mozilla Firefox < 50.0.2 - 'nsSMILTimeContainer::NotifyTimeChange()' Remote Code Execution (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/41151","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/41151.rb","codes":["CVE-2016-9079"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_BROWSER_FIREFOX_SMIL_UAF","name":"Firefox nsSMILTimeContainer::NotifyTimeChange() RCE","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/browser/firefox_smil_uaf.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/browser/firefox_smil_uaf","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":4,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"debian","product":"firefox-esr","name":"firefox-esr","label":"firefox-esr","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/firefox-esr","purlType":"deb","versions":[{"text":"< 45.5.1esr-1","noFixRecorded":false,"fixedIn":null},{"text":"< 45.5.1esr-1~deb8u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-1 | < 45.5.1esr-1~deb8u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"firefox","name":"firefox","label":"firefox","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/firefox","purlType":"deb","versions":[{"text":"< 50.0.2+build1-0ubuntu0.14.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 50.0.2+build1-0ubuntu0.16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 50.0.2+build1-0ubuntu0.14.04.1 | < 50.0.2+build1-0ubuntu0.16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/thunderbird","purlType":"deb","versions":[{"text":"< 1:45.5.1+build1-0ubuntu0.14.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:45.5.1+build1-0ubuntu0.16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:45.5.1+build1-0ubuntu0.14.04.1 | < 1:45.5.1+build1-0ubuntu0.16.04.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mageia","product":"firefox","name":"firefox","label":"firefox","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/firefox","purlType":"rpm","versions":[{"text":"< 45.5.1-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"firefox-l10n","name":"firefox-l10n","label":"firefox-l10n","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/firefox-l10n","purlType":"rpm","versions":[{"text":"< 45.5.1-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1-1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"nss","name":"nss","label":"nss","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/nss","purlType":"rpm","versions":[{"text":"< 3.27.2-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.27.2-1.mga5","eol":null,"hubHref":null},{"vendor":"mozilla","product":"firefox","name":"firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 50.0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 50.0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 45.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 50.0.2 | < 50.0.2 | < 45.5.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"firefox_esr","name":"firefox esr","label":"firefox_esr","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 45.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 45.5.1","eol":null,"hubHref":"/vendor/mozilla/firefox_esr"},{"vendor":"mozilla","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 45.5.1","noFixRecorded":false,"fixedIn":null},{"text":"< 45.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 45.5.1 | < 45.5.1","eol":null,"hubHref":"/vendor/mozilla/thunderbird"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":{"isEol":true,"eolDate":"2017-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5","label":"5 (ELS)","eolFrom":"2017-03-31T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"5.11"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus","name":"enterprise linux server aus","label":"enterprise_linux_server_aus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.3","noFixRecorded":false,"fixedIn":null},{"text":"7.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.3 | 7.4","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus","name":"enterprise linux server eus","label":"enterprise_linux_server_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.3","noFixRecorded":false,"fixedIn":null},{"text":"7.4","noFixRecorded":false,"fixedIn":null},{"text":"7.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.3 | 7.4 | 7.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"firefox","name":"firefox","label":"firefox","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/firefox","purlType":"rpm","versions":[{"text":"< 0:45.5.1-1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el6_8","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el7_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:45.5.1-1.el5_11 | < 0:45.5.1-1.el6_8 | < 0:45.5.1-1.el7_3","eol":null,"hubHref":null},{"vendor":"redhat","product":"firefox-debuginfo","name":"firefox-debuginfo","label":"firefox-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/firefox-debuginfo","purlType":"rpm","versions":[{"text":"< 0:45.5.1-1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el6_8","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el7_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:45.5.1-1.el5_11 | < 0:45.5.1-1.el6_8 | < 0:45.5.1-1.el7_3","eol":null,"hubHref":null},{"vendor":"redhat","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/thunderbird","purlType":"rpm","versions":[{"text":"< 0:45.5.1-1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el6_8","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el7_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:45.5.1-1.el5_11 | < 0:45.5.1-1.el6_8 | < 0:45.5.1-1.el7_3","eol":null,"hubHref":null},{"vendor":"redhat","product":"thunderbird-debuginfo","name":"thunderbird-debuginfo","label":"thunderbird-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/thunderbird-debuginfo","purlType":"rpm","versions":[{"text":"< 0:45.5.1-1.el5_11","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el6_8","noFixRecorded":false,"fixedIn":null},{"text":"< 0:45.5.1-1.el7_3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:45.5.1-1.el5_11 | < 0:45.5.1-1.el6_8 | < 0:45.5.1-1.el7_3","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP1","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP2","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server 12-LTSS","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server 12-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server 12-LTSS","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"suse","product":"MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"MozillaFirefox","label":"MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 45.5.1esr-93.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 45.5.1esr-93.1","eol":null,"hubHref":null},{"vendor":"torproject","product":"tor","name":"tor","label":"tor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/torproject/tor"}],"affectedCount":32,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://www.debian.org/security/2016/dsa-3730","label":"www.debian.org/security/2016/dsa-3730","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2843.html","label":"rhn.redhat.com/errata/RHSA-2016-2843.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-35","label":"security.gentoo.org/glsa/201701-35","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1037370","label":"www.securitytracker.com/id/1037370","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/42327/","label":"www.exploit-db.com/exploits/42327/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2850.html","label":"rhn.redhat.com/errata/RHSA-2016-2850.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2016-92/","label":"www.mozilla.org/security/advisories/mfsa2016-92/","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94591","label":"www.securityfocus.com/bid/94591","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-15","label":"security.gentoo.org/glsa/201701-15","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/41151/","label":"www.exploit-db.com/exploits/41151/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1321066","label":"bugzilla.mozilla.org/show_bug.cgi?id=1321066","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://advisories.mageia.org/MGASA-2016-0410.html","label":"advisories.mageia.org/MGASA-2016-0410.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19878","label":"bugs.mageia.org/show_bug.cgi?id=19878","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/","label":"www.mozilla.org/en-US/security/advisories/mfsa2016-92/","hostname":"www.mozilla.org","tags":["Advisory","REPORT"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","label":"www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","hostname":"www.mozilla.org","tags":["WEB"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-2843.html","label":"rhn.redhat.com/errata/RHSA-2016-2843.html","hostname":"rhn.redhat.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163048-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20163048-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1012964","label":"bugzilla.suse.com/1012964","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9079","label":"www.suse.com/security/cve/CVE-2016-9079","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2843","label":"access.redhat.com/errata/RHSA-2016:2843","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/#CVE-2016-9079","label":"www.mozilla.org/en-US/security/advisories/mfsa2016-92/","hostname":"www.mozilla.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400376","label":"bugzilla.redhat.com/show_bug.cgi?id=1400376","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2843.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2843.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9079","label":"access.redhat.com/security/cve/CVE-2016-9079","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9079","label":"www.cve.org/CVERecord?id=CVE-2016-9079","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9079","label":"nvd.nist.gov/vuln/detail/CVE-2016-9079","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["ARTICLE","REPORT"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2850","label":"access.redhat.com/errata/RHSA-2016:2850","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2850.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2850.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9079","label":"ubuntu.com/security/CVE-2016-9079","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3140-1","label":"ubuntu.com/security/notices/USN-3140-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3141-1","label":"ubuntu.com/security/notices/USN-3141-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9079","label":"security-tracker.debian.org/tracker/CVE-2016-9079","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-730-1","DLA-752-1","DSA-3730-1","MGASA-2016-0409","OPENSUSE-SU-2016:3019-1","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1","SUSE-SU-2016:3080-1","SUSE-SU-2016:3105-1","USN-3140-1","USN-3141-1"],"duplicates":[],"related":["OPENSUSE-SU-2016:3019-1","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1","SUSE-SU-2016:3080-1","SUSE-SU-2016:3105-1","USN-3140-1","USN-3141-1"]},"timeline":[{"kind":"published","date":"2018-06-11T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2023-06-22T00:00:00.000Z","label":"Added to CISA KEV","detail":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2023-07-13T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:45:50.578Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:58:49.744Z","stale":false,"partial":false}}