CVE-2016-5261

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 48.0 Mozilla Firefox ESR versions prior to 45.4

Description The issue is caused by an integer overflow in the WebSocketChannel class within the WebSockets subsystem. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption, via crafted packets that trigger incorrect buffer-resize operations during buffering.

Recommendations For Mozilla Firefox versions prior to 48.0, update to version 48.0 or later to resolve the issue. For Mozilla Firefox ESR versions prior to 45.4, update to version 45.4 or later to resolve the issue.