ISOMAN

CVE

CVE-2016-1935

Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux7.9 x86_64 server dvdunknownsource
Oracle Linux7.9 x86_64 server bootunknownsource
Oracle Linux7.9 x86_64 server uek-bootunknownsource
Oracle Linux7.9 source source-dvd1unknownsource
Oracle Linux7.9 source source-dvd2unknownsource
Oracle Linux7.8 x86_64 server dvdunknownsource
Oracle Linux7.8 x86_64 server bootunknownsource
Oracle Linux7.8 x86_64 server uek-bootunknownsource
Oracle Linux7.8 source source-dvd1unknownsource
Oracle Linux7.8 source source-dvd2unknownsource
Oracle Linux7.7 x86_64 server dvdunknownsource
Oracle Linux7.7 x86_64 server bootunknownsource
Oracle Linux7.7 x86_64 server uek-bootunknownsource
Oracle Linux7.7 source source-dvd1unknownsource
Oracle Linux7.7 source source-dvd2unknownsource
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource
Oracle Linux7.9 aarch64 server dvdunknownsource
Oracle Linux7.9 aarch64 server uek-bootunknownsource
Oracle Linux7.8 aarch64 server dvdunknownsource
Oracle Linux7.8 aarch64 server uek-bootunknownsource
Oracle Linux7.7 aarch64 server dvdunknownsource
Oracle Linux7.7 aarch64 server uek-bootunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
  2. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
  3. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
  4. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
  5. http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
  6. http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
  7. http://rhn.redhat.com/errata/RHSA-2016-0071.html
  8. http://rhn.redhat.com/errata/RHSA-2016-0258.html
  9. http://www.debian.org/security/2016/dsa-3457
  10. http://www.debian.org/security/2016/dsa-3491
  11. http://www.mozilla.org/security/announce/2016/mfsa2016-03.html
  12. http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
  13. http://www.securityfocus.com/bid/81952
  14. http://www.securitytracker.com/id/1034825
  15. http://www.ubuntu.com/usn/USN-2880-1
  16. http://www.ubuntu.com/usn/USN-2880-2
  17. http://www.ubuntu.com/usn/USN-2904-1
  18. https://bugzilla.mozilla.org/show_bug.cgi?id=1220450
  19. https://security.gentoo.org/glsa/201605-06
  20. http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html