Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2016-1974

Disclosure Date: March 13, 2016 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

mozilla,
opensuse,
oracle,
suse

Products

firefox,
firefox 38.0,
firefox 38.0.1,
firefox 38.0.5,
firefox 38.1.0,
firefox 38.1.1,
firefox 38.2.0,
firefox 38.2.1,
firefox 38.3.0,
firefox 38.4.0,
firefox 38.5.0,
firefox 38.5.1,
firefox 38.6.0,
firefox 38.6.1,
leap 42.1,
linux 5.0,
linux 6,
linux 7,
linux enterprise 12.0,
opensuse 13.1,
opensuse 13.2,
thunderbird

References

Canonical

CVE-2016-1974 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1974)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html

http://www.mozilla.org/security/announce/2016/mfsa2016-34.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html

USN-2917-1 (http://www.ubuntu.com/usn/USN-2917-1)

DSA-3520 (http://www.debian.org/security/2016/dsa-3520)

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1228103

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html

DSA-3510 (http://www.debian.org/security/2016/dsa-3510)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html

SECTRACK-1035215 (http://www.securitytracker.com/id/1035215)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html

GLSA-201605-06 (https://security.gentoo.org/glsa/201605-06)

USN-2934-1 (http://www.ubuntu.com/usn/USN-2934-1)

USN-2917-2 (http://www.ubuntu.com/usn/USN-2917-2)

USN-2917-3 (http://www.ubuntu.com/usn/USN-2917-3)

Rapid7

Technical Analysis