high7.5Known exploitedPublic exploit code
CVE-2016-9079
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-06-22. Federal due date: 2023-07-13.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Firefox < 50.0.2 - 'nsSMILTimeContainer::NotifyTimeChange()' Remote Code Execution (Metasploit)2017-01-24 · remote · windows · Verified
- Firefox 50.0.1 - ASM.JS JIT-Spray Remote Code Execution2017-07-14 · remote · windows
Impact
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 9.0 |
| Redhat | Enterprise Linux | Versions 5.0, 6.0, 7.0 |
| Redhat | Enterprise Linux Desktop | Versions 5.0, 6.0, 7.0 |
| Redhat | Enterprise Linux Server | Versions 5.0, 6.0, 7.0 |
| Redhat | Enterprise Linux Server Aus | Versions 7.3, 7.4 |
| Redhat | Enterprise Linux Server Eus | Versions 7.3, 7.4, 7.5 |
| Redhat | Enterprise Linux Workstation | Versions 5.0, 6.0, 7.0 |
| Mozilla | Thunderbird | before 45.5.1 |
| Mozilla | Firefox | before 50.0.2 before 45.5.1 |
| Torproject | Tor | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://rhn.redhat.com/errata/RHSA-2016-2843.html
- http://rhn.redhat.com/errata/RHSA-2016-2850.html
- http://www.securityfocus.com/bid/94591
- http://www.securitytracker.com/id/1037370
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
- https://security.gentoo.org/glsa/201701-15
- https://security.gentoo.org/glsa/201701-35
- https://www.debian.org/security/2016/dsa-3730
- https://www.exploit-db.com/exploits/41151/
- https://www.exploit-db.com/exploits/42327/
- https://www.mozilla.org/security/advisories/mfsa2016-92/
- http://rhn.redhat.com/errata/RHSA-2016-2843.html
- http://rhn.redhat.com/errata/RHSA-2016-2850.html
- http://www.securityfocus.com/bid/94591
- http://www.securitytracker.com/id/1037370
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
- https://security.gentoo.org/glsa/201701-15
- https://security.gentoo.org/glsa/201701-35
- https://www.debian.org/security/2016/dsa-3730
- https://www.exploit-db.com/exploits/41151/
- https://www.exploit-db.com/exploits/42327/
- https://www.mozilla.org/security/advisories/mfsa2016-92/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079