// For flags

CVE-2016-1930

Mozilla: Miscellaneous memory safety hazards (rv:38.6) (MFSA 2016-01)

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Múltiples vulnerabilidades no especificadas en el motor del navegador en Mozilla Firefox en versiones anteriores a 44.0 y Firefox ESR 38.x en versiones anteriores a 38.6 permiten a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos.

Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, Randell Jesup, Nicolas Pierron, Eric Rescorla, Tyson Smith, and Gabor Krizsanits discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. Gustavo Grieco discovered an out-of-memory crash when loading GIF images in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-01-20 CVE Reserved
  • 2016-01-27 CVE Published
  • 2024-08-05 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (32)
URL Tag Source
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Third Party Advisory
http://www.securityfocus.com/bid/81953 Vdb Entry
http://www.securitytracker.com/id/1034825 Vdb Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1221385 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1223670 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1224200 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1230483 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1230639 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1230668 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1230686 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1233152 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1233346 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1233925 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1234280 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1234571 Issue Tracking
URL Date SRC
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html 2019-12-27
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html 2019-12-27
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html 2019-12-27
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html 2019-12-27
http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html 2019-12-27
http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html 2019-12-27
http://rhn.redhat.com/errata/RHSA-2016-0071.html 2019-12-27
http://rhn.redhat.com/errata/RHSA-2016-0258.html 2019-12-27
http://www.debian.org/security/2016/dsa-3457 2019-12-27
http://www.debian.org/security/2016/dsa-3491 2019-12-27
http://www.mozilla.org/security/announce/2016/mfsa2016-01.html 2019-12-27
http://www.ubuntu.com/usn/USN-2880-1 2019-12-27
http://www.ubuntu.com/usn/USN-2880-2 2019-12-27
http://www.ubuntu.com/usn/USN-2904-1 2019-12-27
https://security.gentoo.org/glsa/201605-06 2019-12-27
https://access.redhat.com/security/cve/CVE-2016-1930 2016-02-18
https://bugzilla.redhat.com/show_bug.cgi?id=1301818 2016-02-18
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Mozilla
Search vendor "Mozilla"
 Firefox
Search vendor "Mozilla" for product "Firefox"
 <= 43.0.4
Search vendor "Mozilla" for product "Firefox" and version " <= 43.0.4"
-
Affected
Oracle
Search vendor "Oracle"
 Linux
Search vendor "Oracle" for product "Linux"
 5.0
Search vendor "Oracle" for product "Linux" and version "5.0"
-
Affected
Oracle
Search vendor "Oracle"
 Linux
Search vendor "Oracle" for product "Linux"
 6
Search vendor "Oracle" for product "Linux" and version "6"
-
Affected
Oracle
Search vendor "Oracle"
 Linux
Search vendor "Oracle" for product "Linux"
 7
Search vendor "Oracle" for product "Linux" and version "7"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox Esr
Search vendor "Mozilla" for product "Firefox Esr"
 38.0
Search vendor "Mozilla" for product "Firefox Esr" and version "38.0"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox Esr
Search vendor "Mozilla" for product "Firefox Esr"
 38.1.0
Search vendor "Mozilla" for product "Firefox Esr" and version "38.1.0"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox Esr
Search vendor "Mozilla" for product "Firefox Esr"
 38.2.0
Search vendor "Mozilla" for product "Firefox Esr" and version "38.2.0"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox Esr
Search vendor "Mozilla" for product "Firefox Esr"
 38.3.0
Search vendor "Mozilla" for product "Firefox Esr" and version "38.3.0"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox Esr
Search vendor "Mozilla" for product "Firefox Esr"
 38.4.0
Search vendor "Mozilla" for product "Firefox Esr" and version "38.4.0"
-
Affected
Mozilla
Search vendor "Mozilla"
 Firefox Esr
Search vendor "Mozilla" for product "Firefox Esr"
 38.5.0
Search vendor "Mozilla" for product "Firefox Esr" and version "38.5.0"
-
Affected
Opensuse
Search vendor "Opensuse"
 Leap
Search vendor "Opensuse" for product "Leap"
 42.1
Search vendor "Opensuse" for product "Leap" and version "42.1"
-
Affected
Opensuse
Search vendor "Opensuse"
 Opensuse
Search vendor "Opensuse" for product "Opensuse"
 13.1
Search vendor "Opensuse" for product "Opensuse" and version "13.1"
-
Affected
Opensuse
Search vendor "Opensuse"
 Opensuse
Search vendor "Opensuse" for product "Opensuse"
 13.2
Search vendor "Opensuse" for product "Opensuse" and version "13.2"
-
Affected