CVE-2016-9079 | BDVDB-2026-102162 Detail
MozillaFirefox
Description#
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-416 Use After Free
References#
- https://www.debian.org/security/2016/dsa-3730
- http://rhn.redhat.com/errata/RHSA-2016-2843.html
- https://security.gentoo.org/glsa/201701-35
- http://www.securitytracker.com/id/1037370
- https://www.exploit-db.com/exploits/42327/
- http://rhn.redhat.com/errata/RHSA-2016-2850.html
- https://www.mozilla.org/security/advisories/mfsa2016-92/
- http://www.securityfocus.com/bid/94591
- https://security.gentoo.org/glsa/201701-15
- https://www.exploit-db.com/exploits/41151/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.