csaf_suse - suse-su-2016:0909-1

suse-su-2016:0909-1

Vulnerability from csaf_suse

Published

2016-03-30 10:06

Modified

2016-03-30 10:06

Summary

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

Notes

Title of the patch

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

Description of the patch

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues: Mozilla Firefox was updated to 38.7.0 ESR (bsc#969894), fixing following security issues: * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7) * MFSA 2016-17/CVE-2016-1954 Local file overwriting and potential privilege escalation through CSP reports * MFSA 2016-20/CVE-2016-1957 Memory leak in libstagefright when deleting an array during MP4 processing * MFSA 2016-21/CVE-2016-1958 Displayed page address can be overridden * MFSA 2016-23/CVE-2016-1960 Use-after-free in HTML5 string parser * MFSA 2016-24/CVE-2016-1961 Use-after-free in SetBody * MFSA 2016-25/CVE-2016-1962 Use-after-free when using multiple WebRTC data channels * MFSA 2016-27/CVE-2016-1964 Use-after-free during XML transformations * MFSA 2016-28/CVE-2016-1965 Addressbar spoofing though history navigation and Location protocol property * MFSA 2016-31/CVE-2016-1966 Memory corruption with malicious NPAPI plugin * MFSA 2016-34/CVE-2016-1974 Out-of-bounds read in HTML parser following a failed allocation * MFSA 2016-35/CVE-2016-1950 Buffer overflow during ASN.1 decoding in NSS * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/ CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/ CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/ CVE-2016-2800/CVE-2016-2801/CVE-2016-2802 Font vulnerabilities in the Graphite 2 library Mozilla NSPR was updated to version 4.12 (bsc#969894), fixing following bugs: * added a PR_GetEnvSecure function, which attempts to detect if the program is being executed with elevated privileges, and returns NULL if detected. It is recommended to use this function in general purpose library code. * fixed a memory allocation bug related to the PR_*printf functions * exported API PR_DuplicateEnvironment, which had already been added in NSPR 4.10.9 * added support for FreeBSD aarch64 * several minor correctness and compatibility fixes Mozilla NSS was updated to fix security issues (bsc#969894): * MFSA 2016-15/CVE-2016-1978 Use-after-free in NSS during SSL connections in low memory * MFSA 2016-35/CVE-2016-1950 Buffer overflow during ASN.1 decoding in NSS * MFSA 2016-36/CVE-2016-1979 Use-after-free during processing of DER encoded keys in NSS

Patchnames

slessp2-firefox-20160310-12483

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaFirefox, mozilla-nspr, mozilla-nss",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues:\n\nMozilla Firefox was updated to 38.7.0 ESR (bsc#969894), fixing\nfollowing security issues:\n* MFSA 2016-16/CVE-2016-1952/CVE-2016-1953\n  Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)\n* MFSA 2016-17/CVE-2016-1954\n  Local file overwriting and potential privilege escalation\n  through CSP reports\n* MFSA 2016-20/CVE-2016-1957\n  Memory leak in libstagefright when deleting an array during\n  MP4 processing\n* MFSA 2016-21/CVE-2016-1958\n  Displayed page address can be overridden\n* MFSA 2016-23/CVE-2016-1960\n  Use-after-free in HTML5 string parser\n* MFSA 2016-24/CVE-2016-1961\n  Use-after-free in SetBody\n* MFSA 2016-25/CVE-2016-1962\n  Use-after-free when using multiple WebRTC data channels\n* MFSA 2016-27/CVE-2016-1964\n  Use-after-free during XML transformations\n* MFSA 2016-28/CVE-2016-1965\n  Addressbar spoofing though history navigation and Location\n  protocol property\n* MFSA 2016-31/CVE-2016-1966\n  Memory corruption with malicious NPAPI plugin\n* MFSA 2016-34/CVE-2016-1974\n  Out-of-bounds read in HTML parser following a failed\n  allocation\n* MFSA 2016-35/CVE-2016-1950\n  Buffer overflow during ASN.1 decoding in NSS\n* MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/\n  CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/\n  CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/\n  CVE-2016-2800/CVE-2016-2801/CVE-2016-2802\n  Font vulnerabilities in the Graphite 2 library\n\nMozilla NSPR was updated to version 4.12 (bsc#969894), fixing following bugs:\n* added a PR_GetEnvSecure function, which attempts to detect if\n  the program is being executed with elevated privileges, and\n  returns NULL if detected. It is recommended to use this function\n  in general purpose library code.\n* fixed a memory allocation bug related to the PR_*printf functions\n* exported API PR_DuplicateEnvironment, which had already been\n  added in NSPR 4.10.9\n* added support for FreeBSD aarch64\n* several minor correctness and compatibility fixes\n\nMozilla NSS was updated to fix security issues (bsc#969894):\n* MFSA 2016-15/CVE-2016-1978\n  Use-after-free in NSS during SSL connections in low memory\n* MFSA 2016-35/CVE-2016-1950\n  Buffer overflow during ASN.1 decoding in NSS\n* MFSA 2016-36/CVE-2016-1979\n  Use-after-free during processing of DER encoded keys in NSS\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "slessp2-firefox-20160310-12483",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0909-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:0909-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160909-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:0909-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-March/001971.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 969894",
        "url": "https://bugzilla.suse.com/969894"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1950 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1952 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1952/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1953 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1953/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1954 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1957 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1957/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1958 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1958/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1960 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1960/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1961 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1961/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1962 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1962/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1964 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1964/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1965 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1965/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1966 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1966/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1974 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1977 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1978 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1978/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1979 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1979/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2790 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2790/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2791 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2791/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2792 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2793 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2793/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2794 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2794/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2795 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2795/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2796 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2796/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2797 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2797/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2798 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2799 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2799/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2800 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2800/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2801 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2801/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2802 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2802/"
      }
    ],
    "title": "Security update for MozillaFirefox, mozilla-nspr, mozilla-nss",
    "tracking": {
      "current_release_date": "2016-03-30T10:06:02Z",
      "generator": {
        "date": "2016-03-30T10:06:02Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:0909-1",
      "initial_release_date": "2016-03-30T10:06:02Z",
      "revision_history": [
        {
          "date": "2016-03-30T10:06:02Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-38.7.0esr-36.3.i586",
                "product": {
                  "name": "MozillaFirefox-38.7.0esr-36.3.i586",
                  "product_id": "MozillaFirefox-38.7.0esr-36.3.i586"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-38.7.0esr-36.3.i586",
                "product": {
                  "name": "MozillaFirefox-translations-38.7.0esr-36.3.i586",
                  "product_id": "MozillaFirefox-translations-38.7.0esr-36.3.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libfreebl3-3.20.2-20.1.i586",
                "product": {
                  "name": "libfreebl3-3.20.2-20.1.i586",
                  "product_id": "libfreebl3-3.20.2-20.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-4.12-19.1.i586",
                "product": {
                  "name": "mozilla-nspr-4.12-19.1.i586",
                  "product_id": "mozilla-nspr-4.12-19.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-devel-4.12-19.1.i586",
                "product": {
                  "name": "mozilla-nspr-devel-4.12-19.1.i586",
                  "product_id": "mozilla-nspr-devel-4.12-19.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-3.20.2-20.1.i586",
                "product": {
                  "name": "mozilla-nss-3.20.2-20.1.i586",
                  "product_id": "mozilla-nss-3.20.2-20.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-devel-3.20.2-20.1.i586",
                "product": {
                  "name": "mozilla-nss-devel-3.20.2-20.1.i586",
                  "product_id": "mozilla-nss-devel-3.20.2-20.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-tools-3.20.2-20.1.i586",
                "product": {
                  "name": "mozilla-nss-tools-3.20.2-20.1.i586",
                  "product_id": "mozilla-nss-tools-3.20.2-20.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-38.7.0esr-36.3.s390x",
                "product": {
                  "name": "MozillaFirefox-38.7.0esr-36.3.s390x",
                  "product_id": "MozillaFirefox-38.7.0esr-36.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-38.7.0esr-36.3.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-38.7.0esr-36.3.s390x",
                  "product_id": "MozillaFirefox-translations-38.7.0esr-36.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreebl3-3.20.2-20.1.s390x",
                "product": {
                  "name": "libfreebl3-3.20.2-20.1.s390x",
                  "product_id": "libfreebl3-3.20.2-20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfreebl3-32bit-3.20.2-20.1.s390x",
                "product": {
                  "name": "libfreebl3-32bit-3.20.2-20.1.s390x",
                  "product_id": "libfreebl3-32bit-3.20.2-20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-4.12-19.1.s390x",
                "product": {
                  "name": "mozilla-nspr-4.12-19.1.s390x",
                  "product_id": "mozilla-nspr-4.12-19.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-32bit-4.12-19.1.s390x",
                "product": {
                  "name": "mozilla-nspr-32bit-4.12-19.1.s390x",
                  "product_id": "mozilla-nspr-32bit-4.12-19.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-devel-4.12-19.1.s390x",
                "product": {
                  "name": "mozilla-nspr-devel-4.12-19.1.s390x",
                  "product_id": "mozilla-nspr-devel-4.12-19.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-3.20.2-20.1.s390x",
                "product": {
                  "name": "mozilla-nss-3.20.2-20.1.s390x",
                  "product_id": "mozilla-nss-3.20.2-20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-32bit-3.20.2-20.1.s390x",
                "product": {
                  "name": "mozilla-nss-32bit-3.20.2-20.1.s390x",
                  "product_id": "mozilla-nss-32bit-3.20.2-20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-devel-3.20.2-20.1.s390x",
                "product": {
                  "name": "mozilla-nss-devel-3.20.2-20.1.s390x",
                  "product_id": "mozilla-nss-devel-3.20.2-20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-tools-3.20.2-20.1.s390x",
                "product": {
                  "name": "mozilla-nss-tools-3.20.2-20.1.s390x",
                  "product_id": "mozilla-nss-tools-3.20.2-20.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-38.7.0esr-36.3.x86_64",
                "product": {
                  "name": "MozillaFirefox-38.7.0esr-36.3.x86_64",
                  "product_id": "MozillaFirefox-38.7.0esr-36.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
                  "product_id": "MozillaFirefox-translations-38.7.0esr-36.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreebl3-3.20.2-20.1.x86_64",
                "product": {
                  "name": "libfreebl3-3.20.2-20.1.x86_64",
                  "product_id": "libfreebl3-3.20.2-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfreebl3-32bit-3.20.2-20.1.x86_64",
                "product": {
                  "name": "libfreebl3-32bit-3.20.2-20.1.x86_64",
                  "product_id": "libfreebl3-32bit-3.20.2-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-4.12-19.1.x86_64",
                "product": {
                  "name": "mozilla-nspr-4.12-19.1.x86_64",
                  "product_id": "mozilla-nspr-4.12-19.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-32bit-4.12-19.1.x86_64",
                "product": {
                  "name": "mozilla-nspr-32bit-4.12-19.1.x86_64",
                  "product_id": "mozilla-nspr-32bit-4.12-19.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nspr-devel-4.12-19.1.x86_64",
                "product": {
                  "name": "mozilla-nspr-devel-4.12-19.1.x86_64",
                  "product_id": "mozilla-nspr-devel-4.12-19.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-3.20.2-20.1.x86_64",
                "product": {
                  "name": "mozilla-nss-3.20.2-20.1.x86_64",
                  "product_id": "mozilla-nss-3.20.2-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-32bit-3.20.2-20.1.x86_64",
                "product": {
                  "name": "mozilla-nss-32bit-3.20.2-20.1.x86_64",
                  "product_id": "mozilla-nss-32bit-3.20.2-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-devel-3.20.2-20.1.x86_64",
                "product": {
                  "name": "mozilla-nss-devel-3.20.2-20.1.x86_64",
                  "product_id": "mozilla-nss-devel-3.20.2-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mozilla-nss-tools-3.20.2-20.1.x86_64",
                "product": {
                  "name": "mozilla-nss-tools-3.20.2-20.1.x86_64",
                  "product_id": "mozilla-nss-tools-3.20.2-20.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-38.7.0esr-36.3.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586"
        },
        "product_reference": "MozillaFirefox-38.7.0esr-36.3.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-38.7.0esr-36.3.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x"
        },
        "product_reference": "MozillaFirefox-38.7.0esr-36.3.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-38.7.0esr-36.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64"
        },
        "product_reference": "MozillaFirefox-38.7.0esr-36.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-38.7.0esr-36.3.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586"
        },
        "product_reference": "MozillaFirefox-translations-38.7.0esr-36.3.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-38.7.0esr-36.3.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x"
        },
        "product_reference": "MozillaFirefox-translations-38.7.0esr-36.3.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-38.7.0esr-36.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreebl3-3.20.2-20.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586"
        },
        "product_reference": "libfreebl3-3.20.2-20.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreebl3-3.20.2-20.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x"
        },
        "product_reference": "libfreebl3-3.20.2-20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreebl3-3.20.2-20.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64"
        },
        "product_reference": "libfreebl3-3.20.2-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreebl3-32bit-3.20.2-20.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x"
        },
        "product_reference": "libfreebl3-32bit-3.20.2-20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfreebl3-32bit-3.20.2-20.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64"
        },
        "product_reference": "libfreebl3-32bit-3.20.2-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-4.12-19.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586"
        },
        "product_reference": "mozilla-nspr-4.12-19.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-4.12-19.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x"
        },
        "product_reference": "mozilla-nspr-4.12-19.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-4.12-19.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64"
        },
        "product_reference": "mozilla-nspr-4.12-19.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-32bit-4.12-19.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x"
        },
        "product_reference": "mozilla-nspr-32bit-4.12-19.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-32bit-4.12-19.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64"
        },
        "product_reference": "mozilla-nspr-32bit-4.12-19.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-devel-4.12-19.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586"
        },
        "product_reference": "mozilla-nspr-devel-4.12-19.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-devel-4.12-19.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x"
        },
        "product_reference": "mozilla-nspr-devel-4.12-19.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nspr-devel-4.12-19.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64"
        },
        "product_reference": "mozilla-nspr-devel-4.12-19.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-3.20.2-20.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586"
        },
        "product_reference": "mozilla-nss-3.20.2-20.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-3.20.2-20.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x"
        },
        "product_reference": "mozilla-nss-3.20.2-20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-3.20.2-20.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64"
        },
        "product_reference": "mozilla-nss-3.20.2-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-32bit-3.20.2-20.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x"
        },
        "product_reference": "mozilla-nss-32bit-3.20.2-20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-32bit-3.20.2-20.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64"
        },
        "product_reference": "mozilla-nss-32bit-3.20.2-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-devel-3.20.2-20.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586"
        },
        "product_reference": "mozilla-nss-devel-3.20.2-20.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-devel-3.20.2-20.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x"
        },
        "product_reference": "mozilla-nss-devel-3.20.2-20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-devel-3.20.2-20.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64"
        },
        "product_reference": "mozilla-nss-devel-3.20.2-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-tools-3.20.2-20.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586"
        },
        "product_reference": "mozilla-nss-tools-3.20.2-20.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-tools-3.20.2-20.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x"
        },
        "product_reference": "mozilla-nss-tools-3.20.2-20.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mozilla-nss-tools-3.20.2-20.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        },
        "product_reference": "mozilla-nss-tools-3.20.2-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-1950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1950",
          "url": "https://www.suse.com/security/cve/CVE-2016-1950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/969894"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970257 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970377 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970378 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970378"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970379 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970380 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970380"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970381 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970431 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970433 for CVE-2016-1950",
          "url": "https://bugzilla.suse.com/970433"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1950"
    },
    {
      "cve": "CVE-2016-1952",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1952"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1952",
          "url": "https://www.suse.com/security/cve/CVE-2016-1952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1952",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1952"
    },
    {
      "cve": "CVE-2016-1953",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1953"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1953",
          "url": "https://www.suse.com/security/cve/CVE-2016-1953"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1953",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1953"
    },
    {
      "cve": "CVE-2016-1954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1954",
          "url": "https://www.suse.com/security/cve/CVE-2016-1954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1954",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1954"
    },
    {
      "cve": "CVE-2016-1957",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1957"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1957",
          "url": "https://www.suse.com/security/cve/CVE-2016-1957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1957",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1957"
    },
    {
      "cve": "CVE-2016-1958",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1958"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1958",
          "url": "https://www.suse.com/security/cve/CVE-2016-1958"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1958",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1958"
    },
    {
      "cve": "CVE-2016-1960",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1960"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1960",
          "url": "https://www.suse.com/security/cve/CVE-2016-1960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1960",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1960"
    },
    {
      "cve": "CVE-2016-1961",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1961"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1961",
          "url": "https://www.suse.com/security/cve/CVE-2016-1961"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1961",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1961"
    },
    {
      "cve": "CVE-2016-1962",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1962"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1962",
          "url": "https://www.suse.com/security/cve/CVE-2016-1962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1962",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2016-1962"
    },
    {
      "cve": "CVE-2016-1964",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1964"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1964",
          "url": "https://www.suse.com/security/cve/CVE-2016-1964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1964",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1964"
    },
    {
      "cve": "CVE-2016-1965",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1965"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1965",
          "url": "https://www.suse.com/security/cve/CVE-2016-1965"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1965",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1965"
    },
    {
      "cve": "CVE-2016-1966",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1966"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1966",
          "url": "https://www.suse.com/security/cve/CVE-2016-1966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1966",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1966"
    },
    {
      "cve": "CVE-2016-1974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1974",
          "url": "https://www.suse.com/security/cve/CVE-2016-1974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1974",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1974"
    },
    {
      "cve": "CVE-2016-1977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1977",
          "url": "https://www.suse.com/security/cve/CVE-2016-1977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1977",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1977"
    },
    {
      "cve": "CVE-2016-1978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1978",
          "url": "https://www.suse.com/security/cve/CVE-2016-1978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1978",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1978"
    },
    {
      "cve": "CVE-2016-1979",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1979"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1979",
          "url": "https://www.suse.com/security/cve/CVE-2016-1979"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-1979",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1979"
    },
    {
      "cve": "CVE-2016-2790",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2790"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2790",
          "url": "https://www.suse.com/security/cve/CVE-2016-2790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2790",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2790"
    },
    {
      "cve": "CVE-2016-2791",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2791"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2791",
          "url": "https://www.suse.com/security/cve/CVE-2016-2791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2791",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2791"
    },
    {
      "cve": "CVE-2016-2792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2792",
          "url": "https://www.suse.com/security/cve/CVE-2016-2792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2792",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2792"
    },
    {
      "cve": "CVE-2016-2793",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2793"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2793",
          "url": "https://www.suse.com/security/cve/CVE-2016-2793"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2793",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2793"
    },
    {
      "cve": "CVE-2016-2794",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2794"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2794",
          "url": "https://www.suse.com/security/cve/CVE-2016-2794"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2794",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2016-2794"
    },
    {
      "cve": "CVE-2016-2795",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2795"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2795",
          "url": "https://www.suse.com/security/cve/CVE-2016-2795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2795",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2795"
    },
    {
      "cve": "CVE-2016-2796",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2796"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2796",
          "url": "https://www.suse.com/security/cve/CVE-2016-2796"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2796",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2796"
    },
    {
      "cve": "CVE-2016-2797",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2797"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2797",
          "url": "https://www.suse.com/security/cve/CVE-2016-2797"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2797",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2797"
    },
    {
      "cve": "CVE-2016-2798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2798",
          "url": "https://www.suse.com/security/cve/CVE-2016-2798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2798",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2798"
    },
    {
      "cve": "CVE-2016-2799",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2799"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2799",
          "url": "https://www.suse.com/security/cve/CVE-2016-2799"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2799",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2016-2799"
    },
    {
      "cve": "CVE-2016-2800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2800",
          "url": "https://www.suse.com/security/cve/CVE-2016-2800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2800",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2800"
    },
    {
      "cve": "CVE-2016-2801",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2801"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2801",
          "url": "https://www.suse.com/security/cve/CVE-2016-2801"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2801",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2801"
    },
    {
      "cve": "CVE-2016-2802",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2802"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2802",
          "url": "https://www.suse.com/security/cve/CVE-2016-2802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969894 for CVE-2016-2802",
          "url": "https://bugzilla.suse.com/969894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:MozillaFirefox-translations-38.7.0esr-36.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:libfreebl3-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-32bit-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nspr-devel-4.12-19.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-32bit-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-devel-3.20.2-20.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:mozilla-nss-tools-3.20.2-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-03-30T10:06:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-2802"
    }
  ]
}

CVE-2016-1954 (GCVE-0-2016-1954)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243178	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-17.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.334Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243178"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-17.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243178"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-17.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1954",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236",
              "refsource": "CONFIRM",
              "url": "http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243178",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243178"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-17.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-17.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1954",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1978 (GCVE-0-2016-1978)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.

References

►

URL

Tags

	https://bto.bluecoat.com/security-advisory/sa124	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3688	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2016-0684.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-15.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-0685.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84275	vdb-entry, x_refsource_BID
	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes	x_refsource_MISC
	http://www.ubuntu.com/usn/USN-2973-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-0591.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035258	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/91787	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=1209546	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.147Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa124"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "DSA-3688",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3688"
          },
          {
            "name": "RHSA-2016:0684",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0684.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-15.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "RHSA-2016:0685",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0685.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "84275",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84275"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes"
          },
          {
            "name": "USN-2973-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2973-1"
          },
          {
            "name": "RHSA-2016:0591",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0591.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "1035258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035258"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209546"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa124"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "DSA-3688",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3688"
        },
        {
          "name": "RHSA-2016:0684",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0684.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-15.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "RHSA-2016:0685",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0685.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "84275",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84275"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes"
        },
        {
          "name": "USN-2973-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2973-1"
        },
        {
          "name": "RHSA-2016:0591",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0591.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "1035258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035258"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209546"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1978",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa124",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa124"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "DSA-3688",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3688"
            },
            {
              "name": "RHSA-2016:0684",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0684.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-15.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-15.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "RHSA-2016:0685",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0685.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "84275",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84275"
            },
            {
              "name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes",
              "refsource": "MISC",
              "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes"
            },
            {
              "name": "USN-2973-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2973-1"
            },
            {
              "name": "RHSA-2016:0591",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0591.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "1035258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035258"
            },
            {
              "name": "91787",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91787"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209546",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209546"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1978",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:50.147Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2791 (GCVE-0-2016-2791)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243473	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.192Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243473"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243473"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2791",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243473",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243473"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2791",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1961 (GCVE-0-2016-1961)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.mozilla.org/security/announce/2016/mfsa2016-24.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	http://zerodayinitiative.com/advisories/ZDI-16-199/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1249377	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:49.265Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-24.html"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://zerodayinitiative.com/advisories/ZDI-16-199/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249377"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-24.html"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://zerodayinitiative.com/advisories/ZDI-16-199/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249377"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3",
              "refsource": "CONFIRM",
              "url": "http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-24.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-24.html"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "http://zerodayinitiative.com/advisories/ZDI-16-199/",
              "refsource": "MISC",
              "url": "http://zerodayinitiative.com/advisories/ZDI-16-199/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249377",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249377"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1961",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:49.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2797 (GCVE-0-2016-2797)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243823	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.317Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243823"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243823"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2797",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243823",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243823"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2797",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.317Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1958 (GCVE-0-2016-1958)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1228754	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-21.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.413Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228754"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-21.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228754"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-21.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1958",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03",
              "refsource": "CONFIRM",
              "url": "http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228754",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228754"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-21.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-21.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1958",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.413Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1950 (GCVE-0-2016-1950)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

References

►

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa119	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3688	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.mozilla.org/security/announce/2016/mfsa2016-35.html	x_refsource_CONFIRM
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/84223	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2924-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-0495.html	vendor-advisory, x_refsource_REDHAT
	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1245528	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.259Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa119"
          },
          {
            "name": "DSA-3688",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3688"
          },
          {
            "name": "openSUSE-SU-2016:1557",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html"
          },
          {
            "name": "APPLE-SA-2016-03-21-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-35.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206167"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206168"
          },
          {
            "name": "84223",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84223"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "APPLE-SA-2016-03-21-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "name": "APPLE-SA-2016-03-21-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "USN-2924-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2924-1"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "APPLE-SA-2016-03-21-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206169"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes"
          },
          {
            "name": "RHSA-2016:0495",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0495.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206166"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245528"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa119"
        },
        {
          "name": "DSA-3688",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3688"
        },
        {
          "name": "openSUSE-SU-2016:1557",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html"
        },
        {
          "name": "APPLE-SA-2016-03-21-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-35.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206167"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206168"
        },
        {
          "name": "84223",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84223"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "APPLE-SA-2016-03-21-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "name": "APPLE-SA-2016-03-21-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "USN-2924-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2924-1"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "APPLE-SA-2016-03-21-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206169"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes"
        },
        {
          "name": "RHSA-2016:0495",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0495.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206166"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245528"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1950",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa119",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa119"
            },
            {
              "name": "DSA-3688",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3688"
            },
            {
              "name": "openSUSE-SU-2016:1557",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html"
            },
            {
              "name": "APPLE-SA-2016-03-21-5",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-35.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-35.html"
            },
            {
              "name": "https://support.apple.com/HT206167",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206167"
            },
            {
              "name": "https://support.apple.com/HT206168",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206168"
            },
            {
              "name": "84223",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84223"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "APPLE-SA-2016-03-21-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "APPLE-SA-2016-03-21-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "USN-2924-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2924-1"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "APPLE-SA-2016-03-21-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "https://support.apple.com/HT206169",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206169"
            },
            {
              "name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes",
              "refsource": "CONFIRM",
              "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes"
            },
            {
              "name": "RHSA-2016:0495",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0495.html"
            },
            {
              "name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes",
              "refsource": "CONFIRM",
              "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes"
            },
            {
              "name": "https://support.apple.com/HT206166",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206166"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245528",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245528"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1950",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.259Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2800 (GCVE-0-2016-2800)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1249338	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.127Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249338"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249338"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2800",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249338",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249338"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2800",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.127Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2793 (GCVE-0-2016-2793)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243513	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.228Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243513"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243513"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2793",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243513",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243513"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2793",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.228Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2794 (GCVE-0-2016-2794)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243526	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.200Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243526"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243526"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2794",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243526",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243526"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2794",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.200Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1979 (GCVE-0-2016-1979)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.

References

►

URL

Tags

	https://bto.bluecoat.com/security-advisory/sa124	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/84221	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3688	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2016/dsa-3576	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1185033	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-0684.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-0685.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes	x_refsource_MISC
	http://www.mozilla.org/security/announce/2016/mfsa2016-36.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2973-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-0591.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.096Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa124"
          },
          {
            "name": "84221",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84221"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "DSA-3688",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3688"
          },
          {
            "name": "DSA-3576",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3576"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1185033"
          },
          {
            "name": "RHSA-2016:0684",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0684.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "RHSA-2016:0685",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0685.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-36.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "name": "USN-2973-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2973-1"
          },
          {
            "name": "RHSA-2016:0591",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0591.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa124"
        },
        {
          "name": "84221",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84221"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "DSA-3688",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3688"
        },
        {
          "name": "DSA-3576",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3576"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1185033"
        },
        {
          "name": "RHSA-2016:0684",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0684.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "RHSA-2016:0685",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0685.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-36.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "name": "USN-2973-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2973-1"
        },
        {
          "name": "RHSA-2016:0591",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0591.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1979",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa124",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa124"
            },
            {
              "name": "84221",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84221"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "DSA-3688",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3688"
            },
            {
              "name": "DSA-3576",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3576"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1185033",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1185033"
            },
            {
              "name": "RHSA-2016:0684",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0684.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "RHSA-2016:0685",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0685.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes",
              "refsource": "MISC",
              "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-36.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-36.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "USN-2973-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2973-1"
            },
            {
              "name": "RHSA-2016:0591",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0591.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1979",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:50.096Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2792 (GCVE-0-2016-2792)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243482	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.028Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243482"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243482"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2792",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243482",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243482"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2792",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2795 (GCVE-0-2016-2795)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243597	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243597"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243597"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2795",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243597",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243597"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2795",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1966 (GCVE-0-2016-1966)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1246054	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-31.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:49.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246054"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-31.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246054"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-31.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1966",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246054",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246054"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-31.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-31.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e",
              "refsource": "CONFIRM",
              "url": "http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1966",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:49.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2801 (GCVE-0-2016-2801)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1249920	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.078Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249920"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249920"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2801",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249920",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249920"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2801",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.078Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1960 (GCVE-0-2016-1960)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-23.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1246014	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://www.exploit-db.com/exploits/44294/	exploit, x_refsource_EXPLOIT-DB
	http://zerodayinitiative.com/advisories/ZDI-16-198/	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://www.exploit-db.com/exploits/42484/	exploit, x_refsource_EXPLOIT-DB
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.462Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-23.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246014"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "44294",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44294/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://zerodayinitiative.com/advisories/ZDI-16-198/"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "42484",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42484/"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-21T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-23.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246014"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "44294",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44294/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://zerodayinitiative.com/advisories/ZDI-16-198/"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "42484",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42484/"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1960",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-23.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-23.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246014",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1246014"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "44294",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44294/"
            },
            {
              "name": "http://zerodayinitiative.com/advisories/ZDI-16-198/",
              "refsource": "MISC",
              "url": "http://zerodayinitiative.com/advisories/ZDI-16-198/"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "42484",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42484/"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1960",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.462Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1952 (GCVE-0-2016-1952)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1241217	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1244250	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1234578	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1249685	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-16.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1123661	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1244995	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1221872	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1224979	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1242279	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.312Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244250"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234578"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249685"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1123661"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244995"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1221872"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224979"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1242279"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244250"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234578"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249685"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1123661"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244995"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1221872"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224979"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1242279"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1952",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241217",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241217"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244250",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244250"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234578",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234578"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249685",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249685"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1123661",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1123661"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244995",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1244995"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1221872",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1221872"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224979",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224979"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1242279",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1242279"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1952",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.312Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2802 (GCVE-0-2016-2802)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1248804	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:20.967Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248804"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248804"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2802",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248804",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248804"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2802",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:20.967Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1953 (GCVE-0-2016-1953)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1243583	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1234425	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1236519	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1248794	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1238935	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1225618	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-16.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1245866	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1224363	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1224361	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243555	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1207958	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1241731	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1247236	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1238558	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1224369	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1205163	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1199171	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243583"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234425"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1236519"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248794"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1225618"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245866"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224363"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224361"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243555"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1207958"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241731"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1247236"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238558"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224369"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205163"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1199171"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T15:57:02",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243583"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234425"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1236519"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248794"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1225618"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245866"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224363"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224361"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243555"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1207958"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241731"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1247236"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238558"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224369"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205163"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1199171"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1953",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243583",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243583"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234425",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1234425"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1236519",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1236519"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248794",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248794"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238935",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238935"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1225618",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1225618"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-16.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245866",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245866"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224363",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224363"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224361",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224361"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243555",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243555"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1207958",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1207958"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241731",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1241731"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1247236",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1247236"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238558",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1238558"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224369",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1224369"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205163",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205163"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1199171",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1199171"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1953",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1964 (GCVE-0-2016-1964)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243335	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-27.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:49.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243335"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-27.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243335"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-27.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1964",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243335",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243335"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-27.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-27.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1964",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:49.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1962 (GCVE-0-2016-1962)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1240760	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-25.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:49.294Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1240760"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-25.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1240760"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-25.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1962",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1240760",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1240760"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-25.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-25.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1962",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:49.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1974 (GCVE-0-2016-1974)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-34.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1228103	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:49.780Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-34.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228103"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-34.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228103"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1974",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-34.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-34.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228103",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1228103"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1974",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:49.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2798 (GCVE-0-2016-2798)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1248805	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248805"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248805"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2798",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248805",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248805"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2798",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.146Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1965 (GCVE-0-2016-1965)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1245264	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.mozilla.org/security/announce/2016/mfsa2016-28.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:49.381Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245264"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-28.html"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245264"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-28.html"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1965",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245264",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1245264"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-28.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-28.html"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1965",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:49.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2799 (GCVE-0-2016-2799)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1249081	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.340Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249081"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249081"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2799",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249081",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249081"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2799",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.340Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2790 (GCVE-0-2016-2790)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243464	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.158Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243464"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243464"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2790",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243464",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243464"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2790",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.158Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1957 (GCVE-0-2016-1957)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-20.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1227052	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.282Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-20.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1227052"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-01T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-20.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1227052"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1957",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-20.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-20.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1227052",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1227052"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1957",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.282Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1977 (GCVE-0-2016-1977)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1248876	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.321Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248876"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248876"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-1977",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248876",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1248876"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-1977",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-01-20T00:00:00",
    "dateUpdated": "2024-08-05T23:17:50.321Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2796 (GCVE-0-2016-2796)

Vulnerability from cvelistv5

Published

2016-03-13 18:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/84222	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2917-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2927-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2016/dsa-3520	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1243816	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3510	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-37.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1035215	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201605-06	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2016/dsa-3515	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2934-1	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-63	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2917-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2917-3	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.233Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
          },
          {
            "name": "84222",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/84222"
          },
          {
            "name": "SUSE-SU-2016:0820",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
          },
          {
            "name": "openSUSE-SU-2016:1767",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:0731",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
          },
          {
            "name": "SUSE-SU-2016:0727",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
          },
          {
            "name": "openSUSE-SU-2016:1778",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2016:0876",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
          },
          {
            "name": "USN-2917-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-1"
          },
          {
            "name": "USN-2927-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2927-1"
          },
          {
            "name": "DSA-3520",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3520"
          },
          {
            "name": "openSUSE-SU-2016:1769",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
          },
          {
            "name": "SUSE-SU-2016:0909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243816"
          },
          {
            "name": "DSA-3510",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3510"
          },
          {
            "name": "openSUSE-SU-2016:0733",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
          },
          {
            "name": "1035215",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035215"
          },
          {
            "name": "SUSE-SU-2016:0777",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
          },
          {
            "name": "GLSA-201605-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201605-06"
          },
          {
            "name": "DSA-3515",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3515"
          },
          {
            "name": "USN-2934-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2934-1"
          },
          {
            "name": "GLSA-201701-63",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-63"
          },
          {
            "name": "USN-2917-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-2"
          },
          {
            "name": "USN-2917-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2917-3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
        },
        {
          "name": "84222",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/84222"
        },
        {
          "name": "SUSE-SU-2016:0820",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
        },
        {
          "name": "openSUSE-SU-2016:1767",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:0731",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
        },
        {
          "name": "SUSE-SU-2016:0727",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
        },
        {
          "name": "openSUSE-SU-2016:1778",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2016:0876",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
        },
        {
          "name": "USN-2917-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-1"
        },
        {
          "name": "USN-2927-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2927-1"
        },
        {
          "name": "DSA-3520",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3520"
        },
        {
          "name": "openSUSE-SU-2016:1769",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
        },
        {
          "name": "SUSE-SU-2016:0909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243816"
        },
        {
          "name": "DSA-3510",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3510"
        },
        {
          "name": "openSUSE-SU-2016:0733",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
        },
        {
          "name": "1035215",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035215"
        },
        {
          "name": "SUSE-SU-2016:0777",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
        },
        {
          "name": "GLSA-201605-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201605-06"
        },
        {
          "name": "DSA-3515",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3515"
        },
        {
          "name": "USN-2934-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2934-1"
        },
        {
          "name": "GLSA-201701-63",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-63"
        },
        {
          "name": "USN-2917-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-2"
        },
        {
          "name": "USN-2917-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2917-3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2796",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:0894",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html"
            },
            {
              "name": "84222",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/84222"
            },
            {
              "name": "SUSE-SU-2016:0820",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html"
            },
            {
              "name": "openSUSE-SU-2016:1767",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
            },
            {
              "name": "openSUSE-SU-2016:0731",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html"
            },
            {
              "name": "SUSE-SU-2016:0727",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html"
            },
            {
              "name": "openSUSE-SU-2016:1778",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2016:0876",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html"
            },
            {
              "name": "USN-2917-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-1"
            },
            {
              "name": "USN-2927-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2927-1"
            },
            {
              "name": "DSA-3520",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3520"
            },
            {
              "name": "openSUSE-SU-2016:1769",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html"
            },
            {
              "name": "SUSE-SU-2016:0909",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243816",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1243816"
            },
            {
              "name": "DSA-3510",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3510"
            },
            {
              "name": "openSUSE-SU-2016:0733",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-37.html"
            },
            {
              "name": "1035215",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035215"
            },
            {
              "name": "SUSE-SU-2016:0777",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html"
            },
            {
              "name": "GLSA-201605-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201605-06"
            },
            {
              "name": "DSA-3515",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3515"
            },
            {
              "name": "USN-2934-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2934-1"
            },
            {
              "name": "GLSA-201701-63",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-63"
            },
            {
              "name": "USN-2917-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-2"
            },
            {
              "name": "USN-2917-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2917-3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2796",
    "datePublished": "2016-03-13T18:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.233Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2016:0909-1

Vulnerability from csaf_suse

CVE-2016-1954 (GCVE-0-2016-1954)

Vulnerability from cvelistv5

CVE-2016-1978 (GCVE-0-2016-1978)

Vulnerability from cvelistv5

CVE-2016-2791 (GCVE-0-2016-2791)

Vulnerability from cvelistv5

CVE-2016-1961 (GCVE-0-2016-1961)

Vulnerability from cvelistv5

CVE-2016-2797 (GCVE-0-2016-2797)

Vulnerability from cvelistv5

CVE-2016-1958 (GCVE-0-2016-1958)

Vulnerability from cvelistv5

CVE-2016-1950 (GCVE-0-2016-1950)

Vulnerability from cvelistv5

CVE-2016-2800 (GCVE-0-2016-2800)

Vulnerability from cvelistv5

CVE-2016-2793 (GCVE-0-2016-2793)

Vulnerability from cvelistv5

CVE-2016-2794 (GCVE-0-2016-2794)

Vulnerability from cvelistv5

CVE-2016-1979 (GCVE-0-2016-1979)

Vulnerability from cvelistv5

CVE-2016-2792 (GCVE-0-2016-2792)

Vulnerability from cvelistv5

CVE-2016-2795 (GCVE-0-2016-2795)

Vulnerability from cvelistv5

CVE-2016-1966 (GCVE-0-2016-1966)

Vulnerability from cvelistv5

CVE-2016-2801 (GCVE-0-2016-2801)

Vulnerability from cvelistv5

CVE-2016-1960 (GCVE-0-2016-1960)

Vulnerability from cvelistv5

CVE-2016-1952 (GCVE-0-2016-1952)

Vulnerability from cvelistv5

CVE-2016-2802 (GCVE-0-2016-2802)

Vulnerability from cvelistv5

CVE-2016-1953 (GCVE-0-2016-1953)

Vulnerability from cvelistv5

CVE-2016-1964 (GCVE-0-2016-1964)

Vulnerability from cvelistv5

CVE-2016-1962 (GCVE-0-2016-1962)

Vulnerability from cvelistv5

CVE-2016-1974 (GCVE-0-2016-1974)

Vulnerability from cvelistv5

CVE-2016-2798 (GCVE-0-2016-2798)

Vulnerability from cvelistv5

CVE-2016-1965 (GCVE-0-2016-1965)

Vulnerability from cvelistv5

CVE-2016-2799 (GCVE-0-2016-2799)

Vulnerability from cvelistv5

CVE-2016-2790 (GCVE-0-2016-2790)

Vulnerability from cvelistv5

CVE-2016-1957 (GCVE-0-2016-1957)

Vulnerability from cvelistv5

CVE-2016-1977 (GCVE-0-2016-1977)

Vulnerability from cvelistv5

CVE-2016-2796 (GCVE-0-2016-2796)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature