NetSight
IP …
critical9.8

CVE-2016-1962

Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remot…

Impact

Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.

Affected products

VendorProductAffected versions
MozillaFirefox
through 44.0.2
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1
OpensuseOpensuse
Version 13.1
OracleLinux
Versions 5.0, 6, 7

References