NetSight
high8.8

CVE-2016-2828

Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL conten…

Impact

Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
MozillaFirefox
through 46.0.1
Versions 45.1.0, 45.1.1
DebianDebian Linux
Version 8.0

References