csaf_suse - suse-su-2016:2131-1

suse-su-2016:2131-1

Vulnerability from csaf_suse

Published

2016-08-22 14:37

Modified

2016-08-22 14:37

Summary

Security update for MozillaFirefox

Notes

Title of the patch

Security update for MozillaFirefox

Description of the patch

MozillaFirefox was updated to 45.3.0 ESR to fix the following issues (bsc#991809): * MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards (rv:48.0 / rv:45.3) * MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed * MFSA 2016-64/CVE-2016-2838 Buffer overflow rendering SVG with bidirectional content * MFSA 2016-65/CVE-2016-2839 Cairo rendering crash due to memory allocation issue with FFmpeg 0.10 * MFSA 2016-67/CVE-2016-5252 Stack underflow during 2D graphics rendering * MFSA 2016-70/CVE-2016-5254 Use-after-free when using alt key and toplevel menus * MFSA 2016-72/CVE-2016-5258 Use-after-free in DTLS during WebRTC session shutdown * MFSA 2016-73/CVE-2016-5259 Use-after-free in service workers with nested sync events * MFSA 2016-76/CVE-2016-5262 Scripts on marquee tag can execute in sandboxed iframes * MFSA 2016-77/CVE-2016-2837 Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback * MFSA 2016-78/CVE-2016-5263 Type confusion in display transformation * MFSA 2016-79/CVE-2016-5264 Use-after-free when applying SVG effects * MFSA 2016-80/CVE-2016-5265 Same-origin policy violation using local HTML file and saved shortcut file * CVE-2016-6354: Fix for possible buffer overrun (bsc#990856) Also a temporary workaround was added: - Temporarily bind Firefox to the first CPU as a hotfix for an apparent race condition (bsc#989196, bsc#990628)

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2016-1254,SUSE-SLE-SAP-12-2016-1254,SUSE-SLE-SDK-12-SP1-2016-1254,SUSE-SLE-SERVER-12-2016-1254,SUSE-SLE-SERVER-12-SP1-2016-1254

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaFirefox",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nMozillaFirefox was updated to 45.3.0 ESR to fix the following issues\n(bsc#991809):\n\n* MFSA 2016-62/CVE-2016-2835/CVE-2016-2836\n  Miscellaneous memory safety hazards (rv:48.0 / rv:45.3)\n* MFSA 2016-63/CVE-2016-2830\n  Favicon network connection can persist when page is closed\n* MFSA 2016-64/CVE-2016-2838\n  Buffer overflow rendering SVG with bidirectional content\n* MFSA 2016-65/CVE-2016-2839\n  Cairo rendering crash due to memory allocation issue with\n  FFmpeg 0.10\n* MFSA 2016-67/CVE-2016-5252\n  Stack underflow during 2D graphics rendering\n* MFSA 2016-70/CVE-2016-5254\n  Use-after-free when using alt key and toplevel menus\n* MFSA 2016-72/CVE-2016-5258\n  Use-after-free in DTLS during WebRTC session shutdown\n* MFSA 2016-73/CVE-2016-5259\n  Use-after-free in service workers with nested sync events\n* MFSA 2016-76/CVE-2016-5262\n  Scripts on marquee tag can execute in sandboxed iframes\n* MFSA 2016-77/CVE-2016-2837\n  Buffer overflow in ClearKey Content Decryption Module (CDM)\n  during video playback\n* MFSA 2016-78/CVE-2016-5263\n  Type confusion in display transformation\n* MFSA 2016-79/CVE-2016-5264\n  Use-after-free when applying SVG effects\n* MFSA 2016-80/CVE-2016-5265\n  Same-origin policy violation using local HTML file and saved\n  shortcut file\n* CVE-2016-6354: Fix for possible buffer overrun (bsc#990856)\n\nAlso a temporary workaround was added:\n- Temporarily bind Firefox to the first CPU as a hotfix\n  for an apparent race condition (bsc#989196, bsc#990628)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2016-1254,SUSE-SLE-SAP-12-2016-1254,SUSE-SLE-SDK-12-SP1-2016-1254,SUSE-SLE-SERVER-12-2016-1254,SUSE-SLE-SERVER-12-SP1-2016-1254",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2131-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2131-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162131-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2131-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-August/002221.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 989196",
        "url": "https://bugzilla.suse.com/989196"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 990628",
        "url": "https://bugzilla.suse.com/990628"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 990856",
        "url": "https://bugzilla.suse.com/990856"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 991809",
        "url": "https://bugzilla.suse.com/991809"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2830 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2830/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2835 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2836 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2837 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2837/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2838 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2838/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2839 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2839/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5252 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5254 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5254/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5258 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5258/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5259 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5259/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5262 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5262/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5263 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5263/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5264 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5264/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5265 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5265/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6354 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6354/"
      }
    ],
    "title": "Security update for MozillaFirefox",
    "tracking": {
      "current_release_date": "2016-08-22T14:37:43Z",
      "generator": {
        "date": "2016-08-22T14:37:43Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2131-1",
      "initial_release_date": "2016-08-22T14:37:43Z",
      "revision_history": [
        {
          "date": "2016-08-22T14:37:43Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
                  "product_id": "MozillaFirefox-devel-45.3.0esr-78.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.3.0esr-78.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-45.3.0esr-78.1.ppc64le",
                  "product_id": "MozillaFirefox-45.3.0esr-78.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.3.0esr-78.1.s390x",
                "product": {
                  "name": "MozillaFirefox-devel-45.3.0esr-78.1.s390x",
                  "product_id": "MozillaFirefox-devel-45.3.0esr-78.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.3.0esr-78.1.s390x",
                "product": {
                  "name": "MozillaFirefox-45.3.0esr-78.1.s390x",
                  "product_id": "MozillaFirefox-45.3.0esr-78.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.3.0esr-78.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-45.3.0esr-78.1.s390x",
                  "product_id": "MozillaFirefox-translations-45.3.0esr-78.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.3.0esr-78.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-45.3.0esr-78.1.x86_64",
                  "product_id": "MozillaFirefox-45.3.0esr-78.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
                  "product_id": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.3.0esr-78.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-devel-45.3.0esr-78.1.x86_64",
                  "product_id": "MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-devel-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-devel-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-2830",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2830"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2830",
          "url": "https://www.suse.com/security/cve/CVE-2016-2830"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983922 for CVE-2016-2830",
          "url": "https://bugzilla.suse.com/983922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-2830",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2830"
    },
    {
      "cve": "CVE-2016-2835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2835",
          "url": "https://www.suse.com/security/cve/CVE-2016-2835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-2835",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2835"
    },
    {
      "cve": "CVE-2016-2836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2836",
          "url": "https://www.suse.com/security/cve/CVE-2016-2836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-2836",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2836"
    },
    {
      "cve": "CVE-2016-2837",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2837"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2837",
          "url": "https://www.suse.com/security/cve/CVE-2016-2837"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-2837",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2837"
    },
    {
      "cve": "CVE-2016-2838",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2838"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2838",
          "url": "https://www.suse.com/security/cve/CVE-2016-2838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-2838",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2838"
    },
    {
      "cve": "CVE-2016-2839",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2839"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2839",
          "url": "https://www.suse.com/security/cve/CVE-2016-2839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-2839",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2839"
    },
    {
      "cve": "CVE-2016-5252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5252",
          "url": "https://www.suse.com/security/cve/CVE-2016-5252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5252",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5252"
    },
    {
      "cve": "CVE-2016-5254",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5254"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5254",
          "url": "https://www.suse.com/security/cve/CVE-2016-5254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5254",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5254"
    },
    {
      "cve": "CVE-2016-5258",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5258"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5258",
          "url": "https://www.suse.com/security/cve/CVE-2016-5258"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5258",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5258"
    },
    {
      "cve": "CVE-2016-5259",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5259"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5259",
          "url": "https://www.suse.com/security/cve/CVE-2016-5259"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5259",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5259"
    },
    {
      "cve": "CVE-2016-5262",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5262"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=\"allow-scripts\" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5262",
          "url": "https://www.suse.com/security/cve/CVE-2016-5262"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5262",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5262"
    },
    {
      "cve": "CVE-2016-5263",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5263"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages \"type confusion.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5263",
          "url": "https://www.suse.com/security/cve/CVE-2016-5263"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5263",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5263"
    },
    {
      "cve": "CVE-2016-5264",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5264"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5264",
          "url": "https://www.suse.com/security/cve/CVE-2016-5264"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5264",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5264"
    },
    {
      "cve": "CVE-2016-5265",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5265"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5265",
          "url": "https://www.suse.com/security/cve/CVE-2016-5265"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991809 for CVE-2016-5265",
          "url": "https://bugzilla.suse.com/991809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5265"
    },
    {
      "cve": "CVE-2016-6354",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6354"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6354",
          "url": "https://www.suse.com/security/cve/CVE-2016-6354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1026047 for CVE-2016-6354",
          "url": "https://bugzilla.suse.com/1026047"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1035082 for CVE-2016-6354",
          "url": "https://bugzilla.suse.com/1035082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1035209 for CVE-2016-6354",
          "url": "https://bugzilla.suse.com/1035209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 990856 for CVE-2016-6354",
          "url": "https://bugzilla.suse.com/990856"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.3.0esr-78.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.3.0esr-78.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-08-22T14:37:43Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6354"
    }
  ]
}

CVE-2016-5264 (GCVE-0-2016-5264)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://www.mozilla.org/security/announce/2016/mfsa2016-79.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1286183	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.992Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-79.html"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1286183"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-79.html"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1286183"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5264",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-79.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-79.html"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1286183",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1286183"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5264",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5258 (GCVE-0-2016-5258)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1279146	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-72.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.999Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279146"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-72.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279146"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-72.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279146",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279146"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-72.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-72.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5258",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.999Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2839 (GCVE-0-2016-2839)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1275339	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2016/mfsa2016-65.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.347Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275339"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-65.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275339"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-65.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2839",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275339",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275339"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-65.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-65.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2839",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5262 (GCVE-0-2016-5262)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-76.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1277475	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.930Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-76.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1277475"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=\"allow-scripts\" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-76.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1277475"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5262",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox=\"allow-scripts\" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-76.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-76.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1277475",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1277475"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5262",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5252 (GCVE-0-2016-5252)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1268854	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-67.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.941Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268854"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-67.html"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268854"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-67.html"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5252",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268854",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268854"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-67.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-67.html"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5252",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.941Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2830 (GCVE-0-2016-2830)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1255270	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	http://www.mozilla.org/security/announce/2016/mfsa2016-63.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1255270"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-63.html"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1255270"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-63.html"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2830",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1255270",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1255270"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-63.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-63.html"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2830",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2836 (GCVE-0-2016-2836)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2016-1809.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1257765	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1282502	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-62.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1268626	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1283823	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1249578	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1258079	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=1154923	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=822081	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.335Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1809",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1809.html"
          },
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1257765"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282502"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268626"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1283823"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249578"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1258079"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1154923"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=822081"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2016:1809",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1809.html"
        },
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1257765"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282502"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268626"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1283823"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249578"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1258079"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1154923"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=822081"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:1809",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1809.html"
            },
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1257765",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1257765"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282502",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282502"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268626",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1268626"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1283823",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1283823"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249578",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1249578"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1258079",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1258079"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1154923",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1154923"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=822081",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=822081"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2836",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5254 (GCVE-0-2016-5254)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1266963	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-70.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.982Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1266963"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-70.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1266963"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-70.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5254",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1266963",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1266963"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-70.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-70.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5254",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.982Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5265 (GCVE-0-2016-5265)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1278013	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-80.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.940Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1278013"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-80.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1278013"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-80.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5265",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1278013",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1278013"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-80.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-80.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5265",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.940Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2835 (GCVE-0-2016-2835)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1282246	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1280215	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1264998	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1222101	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2016/mfsa2016-62.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1251308	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1275582	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1254106	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1280443	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1270537	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.022Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282246"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280215"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1264998"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1222101"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1251308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275582"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1254106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280443"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1270537"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282246"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280215"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1264998"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1222101"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1251308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275582"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1254106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280443"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1270537"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2835",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282246",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282246"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280215",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280215"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1264998",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1264998"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1222101",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1222101"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-62.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1251308",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1251308"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275582",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1275582"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1254106",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1254106"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280443",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1280443"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1270537",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1270537"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2835",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.022Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5259 (GCVE-0-2016-5259)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1282992	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2016/mfsa2016-73.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282992"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-73.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282992"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-73.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5259",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282992",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1282992"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-73.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-73.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5259",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.939Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5263 (GCVE-0-2016-5263)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=1276897	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2016/mfsa2016-78.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.877Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1276897"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-78.html"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages \"type confusion.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1276897"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-78.html"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-5263",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages \"type confusion.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1276897",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1276897"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-78.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-78.html"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-5263",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-06-03T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2838 (GCVE-0-2016-2838)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.

References

►

URL

Tags

	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2016/mfsa2016-64.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1279814	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/92261	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.324Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-64.html"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279814"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "name": "92261",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92261"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-64.html"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279814"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "name": "92261",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92261"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2838",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-64.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-64.html"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279814",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1279814"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "92261",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92261"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2838",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.324Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2837 (GCVE-0-2016-2837)

Vulnerability from cvelistv5

Published

2016-08-05 01:00

Modified

2024-08-05 23:32

Severity ?

CWE

Summary

Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.

References

►

URL

Tags

	http://www.mozilla.org/security/announce/2016/mfsa2016-77.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3640	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036508	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/92258	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1551.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1274637	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-15	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.zerodayinitiative.com/advisories/ZDI-16-673	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:32:21.194Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-77.html"
          },
          {
            "name": "DSA-3640",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3640"
          },
          {
            "name": "1036508",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036508"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "USN-3044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3044-1"
          },
          {
            "name": "92258",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92258"
          },
          {
            "name": "RHSA-2016:1551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1274637"
          },
          {
            "name": "GLSA-201701-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-15"
          },
          {
            "name": "openSUSE-SU-2016:1964",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-673"
          },
          {
            "name": "openSUSE-SU-2016:2026",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-15T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-77.html"
        },
        {
          "name": "DSA-3640",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3640"
        },
        {
          "name": "1036508",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036508"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "USN-3044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3044-1"
        },
        {
          "name": "92258",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92258"
        },
        {
          "name": "RHSA-2016:1551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1274637"
        },
        {
          "name": "GLSA-201701-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-15"
        },
        {
          "name": "openSUSE-SU-2016:1964",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-673"
        },
        {
          "name": "openSUSE-SU-2016:2026",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2016-2837",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2016/mfsa2016-77.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2016/mfsa2016-77.html"
            },
            {
              "name": "DSA-3640",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3640"
            },
            {
              "name": "1036508",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036508"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "USN-3044-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3044-1"
            },
            {
              "name": "92258",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92258"
            },
            {
              "name": "RHSA-2016:1551",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1551.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1274637",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1274637"
            },
            {
              "name": "GLSA-201701-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-15"
            },
            {
              "name": "openSUSE-SU-2016:1964",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-16-673",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-673"
            },
            {
              "name": "openSUSE-SU-2016:2026",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2016-2837",
    "datePublished": "2016-08-05T01:00:00",
    "dateReserved": "2016-03-01T00:00:00",
    "dateUpdated": "2024-08-05T23:32:21.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6354 (GCVE-0-2016-6354)

Vulnerability from cvelistv5

Published

2016-09-21 14:00

Modified

2024-08-06 01:29

Severity ?

CWE

Summary

Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2016/07/18/8	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/07/26/12	mailing-list, x_refsource_MLIST
	https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3653	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201701-31	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:29:19.088Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20160718 CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/07/18/8"
          },
          {
            "name": "[oss-security] 20160726 Re: CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/07/26/12"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466"
          },
          {
            "name": "DSA-3653",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3653"
          },
          {
            "name": "GLSA-201701-31",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-31"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-12T22:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20160718 CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/07/18/8"
        },
        {
          "name": "[oss-security] 20160726 Re: CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/07/26/12"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466"
        },
        {
          "name": "DSA-3653",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3653"
        },
        {
          "name": "GLSA-201701-31",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-31"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6354",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20160718 CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/07/18/8"
            },
            {
              "name": "[oss-security] 20160726 Re: CVE request: flex: Buffer overflow in generated code (yy_get_next_buffer)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/07/26/12"
            },
            {
              "name": "https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466",
              "refsource": "CONFIRM",
              "url": "https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466"
            },
            {
              "name": "DSA-3653",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3653"
            },
            {
              "name": "GLSA-201701-31",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-31"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6354",
    "datePublished": "2016-09-21T14:00:00",
    "dateReserved": "2016-07-26T00:00:00",
    "dateUpdated": "2024-08-06T01:29:19.088Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2016:2131-1

Vulnerability from csaf_suse

CVE-2016-5264 (GCVE-0-2016-5264)

Vulnerability from cvelistv5

CVE-2016-5258 (GCVE-0-2016-5258)

Vulnerability from cvelistv5

CVE-2016-2839 (GCVE-0-2016-2839)

Vulnerability from cvelistv5

CVE-2016-5262 (GCVE-0-2016-5262)

Vulnerability from cvelistv5

CVE-2016-5252 (GCVE-0-2016-5252)

Vulnerability from cvelistv5

CVE-2016-2830 (GCVE-0-2016-2830)

Vulnerability from cvelistv5

CVE-2016-2836 (GCVE-0-2016-2836)

Vulnerability from cvelistv5

CVE-2016-5254 (GCVE-0-2016-5254)

Vulnerability from cvelistv5

CVE-2016-5265 (GCVE-0-2016-5265)

Vulnerability from cvelistv5

CVE-2016-2835 (GCVE-0-2016-2835)

Vulnerability from cvelistv5

CVE-2016-5259 (GCVE-0-2016-5259)

Vulnerability from cvelistv5

CVE-2016-5263 (GCVE-0-2016-5263)

Vulnerability from cvelistv5

CVE-2016-2838 (GCVE-0-2016-2838)

Vulnerability from cvelistv5

CVE-2016-2837 (GCVE-0-2016-2837)

Vulnerability from cvelistv5

CVE-2016-6354 (GCVE-0-2016-6354)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature