CVE-2016-2811

Published: Apr 30, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.

Affected (1)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 45.0.2

References (18)

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2016/mfsa2016-42.html

Source: security@mozilla.org

Vendor Advisory

http://www.securitytracker.com/id/1035692

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2936-1

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2936-2

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2936-3

Source: security@mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1252330

Source: security@mozilla.org

https://security.gentoo.org/glsa/201701-15

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html