CVE-2016-2818

Published: Jun 13, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected (40)

Products: Mozilla: Firefox · Debian: Debian Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Eus, Enterprise Linux For Scientific Computing, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Workstation · +3 more

Show all products

1 product

1 product

12 products

Enterprise Linux Desktop

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Workstation

Novell

4 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Suse Linux Enterprise Software Development Kit

Suse Package Hub For Suse Linux Enterprise

2 products

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 45.1.0
Mozilla Firefox	Version 45.1.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration C

22 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux For Ibm Z Systems	Version 5.0
Redhat Enterprise Linux For Ibm Z Systems	Version 6.0
Redhat Enterprise Linux For Ibm Z Systems	Version 7.0
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.2
Redhat Enterprise Linux For Power Big Endian	Version 5.0
Redhat Enterprise Linux For Power Big Endian	Version 6.0
Redhat Enterprise Linux For Power Big Endian	Version 7.0
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.2
Redhat Enterprise Linux For Power Little Endian	Version 7.0
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.2
Redhat Enterprise Linux For Scientific Computing	Version 6.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 46.0.1

Configuration E

10 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Desktop	Version 12.0
Novell Suse Linux Enterprise Desktop	Version 12.0 sp1
Novell Suse Linux Enterprise Server	Version 12.0
Novell Suse Linux Enterprise Server	Version 12.0 sp1
Novell Suse Linux Enterprise Software Development Kit	Version 12.0
Novell Suse Linux Enterprise Software Development Kit	Version 12.0 sp1
Novell Suse Package Hub For Suse Linux Enterprise	Version 12
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration F

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (60)

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html

Source: security@mozilla.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3600

Source: security@mozilla.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3647

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2016/mfsa2016-49.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: security@mozilla.org

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: security@mozilla.org

http://www.securityfocus.com/bid/91075

Source: security@mozilla.org

http://www.securitytracker.com/id/1036057

Source: security@mozilla.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2993-1

Source: security@mozilla.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3023-1

Source: security@mozilla.org

https://access.redhat.com/errata/RHSA-2016:1217

Source: security@mozilla.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1392

Source: security@mozilla.org

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1234147

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1256493

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1256739

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1256968

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1261230

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1261752

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1263384

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1264575

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1265577

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1267130

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1269729

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1273202

Source: security@mozilla.org

Issue TrackingPermissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1273701

Source: security@mozilla.org

Issue TrackingPermissions Required

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html