NetSight
IP …
high7.5

CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is e…

Impact

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.

Affected products

VendorProductAffected versions
MozillaFirefox
through 46.0.1
Versions 45.1.0, 45.1.1
DebianDebian Linux
Version 8.0
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04

References