NetSight
IP …
high8.8Public exploit code

CVE-2016-2819

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-contex…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.

Affected products

VendorProductAffected versions
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
MozillaFirefox
through 46.0.1
Versions 45.1.0, 45.1.1
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04

Weakness classification

CWE-119

References