PT-2016-3237

CVE-2016-1935

·

Published

2016-01-26

·

Updated

2024-12-12

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0 Firefox ESR versions prior to 38.6
Description The issue arises from a buffer overflow in the BufferSubData function due to incorrect handling of WebGL content. This can allow remote attackers to execute arbitrary code or cause a denial of service via specially crafted WebGL content.
Recommendations For Mozilla Firefox versions prior to 44.0, update to version 44.0 or later. For Firefox ESR versions prior to 38.6, update to version 38.6 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-1057
ALT-PU-2016-1454
CESA-2016_0071
CESA-2016_0258
DSA-3457-1
DSA-3491-1
MGASA-2016-0041
MGASA-2016-0078
OPENSUSE-SU-2016_0309-1
OPENSUSE-SU-2016_0310-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2016:0071
RHSA-2016_0071
RHSA-2016:0258
RHSA-2016_0258
SUSE-SU-2016:0334-1
SUSE-SU-2016:0338-1
SUSE-SU-2016:0584-1
USN-2880-1
USN-2880-2
USN-2904-1
Found an issue in the description? Have something to add? Feel free to write us 👾