CVE-2016-5257
Publication date 22 September 2016
Last updated 24 July 2024
Ubuntu priority
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| firefox | ||
| 16.04 LTS xenial |
Fixed 49.0+build4-0ubuntu0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 49.0+build4-0ubuntu0.14.04.1
|
|
| thunderbird | ||
| 16.04 LTS xenial |
Fixed 1:45.4.0+build1-0ubuntu0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 1:45.4.0+build1-0ubuntu0.14.04.1
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
9.8 · Critical
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-3076-1
- Firefox vulnerabilities
- 22 September 2016
- USN-3112-1
- Thunderbird vulnerabilities
- 27 October 2016