CVE-2016-1961

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7

Description The issue is related to a use-after-free vulnerability in the nsHTMLDocument::SetBody function, which can be exploited by remote attackers to execute arbitrary code. This is achieved by leveraging the mishandling of a root element.

Recommendations For Mozilla Firefox versions prior to 45.0, update to version 45.0 or later. For Firefox ESR versions prior to 38.7, update to version 38.7 or later.