PT-2016-6338
CVE-2016-5278
·
تاريخ النشر
2016-09-20
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 49.0
Firefox ESR 45.x versions prior to 45.4
Thunderbird versions prior to 45.4
Description
A heap-based buffer overflow issue exists in the
nsBMPEncoder::AddImageFrame function, allowing remote attackers to execute arbitrary code via crafted image data that is mishandled during the encoding of an image frame to an image.Recommendations
For Mozilla Firefox versions prior to 49.0, update to version 49.0 or later.
For Firefox ESR 45.x versions prior to 45.4, update to version 45.4 or later.
For Thunderbird versions prior to 45.4, update to version 45.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾