Vulnerabilities

TI-2016-07433 CVE-2016-9079 · GHSA-cmgc-v5fc-wx68

Use after free in Mozilla Firefox

CRITICAL 90KEV

A use-after-free vulnerability in SVG Animation has been discovered.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.87357 Published 2018-06-11 Fixed in 50.0.2, 45.5.1 CWE-416

TI-2016-07428 CVE-2016-9074 · GHSA-wwm5-654g-jj42

LOW 31

An existing mitigation of timing side-channel attacks is insufficient in some circumstances.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02361 Published 2018-06-11 Partial fix · 45.5, 50 CWE-200

TI-2016-07420 CVE-2016-9066 · GHSA-m65c-6q88-9x7g

MEDIUM 47

A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.12024 Published 2018-06-11 Fixed in 45.5, 50 CWE-119

TI-2016-04593 CVE-2016-5297 · GHSA-3h9f-q3m2-wjhj

MEDIUM 48

An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03531 Published 2018-06-11 Fixed in 45.5, 50 CWE-190

TI-2016-04592 CVE-2016-5296 · GHSA-q9hf-wj5h-x9vx

LOW 39

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03387 Published 2018-06-11 Fixed in 45.5, 50 CWE-119

TI-2016-04587 CVE-2016-5291 · GHSA-5rpq-63gx-j9m8

LOW 25

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00433 Published 2018-06-11 Fixed in 45.5, 50 CWE-20

TI-2016-04586 CVE-2016-5290 · GHSA-qf56-xjg6-qx59

MEDIUM 48

Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03212 Published 2018-06-11 Fixed in 45.5, 50 CWE-119