NetSight
IP …
critical9.8Public exploit code

CVE-2016-9899

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 9.0
RedhatEnterprise Linux
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
MozillaFirefox
from 52.0 before 52.1.0
before 53.0
before 45.9.0
MozillaThunderbird
before 52.1.0

Weakness classification

CWE-416

References