CVE

Id
88780  
CVE No.
CVE-2016-1961  
Status
Candidate  
Description
Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.  
Phase
Assigned (20160120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
771637 88780 CVE-2016-1961 MISC:http://zerodayinitiative.com/advisories/ZDI-16-199/  View
771638 88780 CVE-2016-1961 CONFIRM:http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3  View
771639 88780 CVE-2016-1961 CONFIRM:http://www.mozilla.org/security/announce/2016/mfsa2016-24.html  View
771640 88780 CVE-2016-1961 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1249377  View
771641 88780 CVE-2016-1961 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
771642 88780 CVE-2016-1961 DEBIAN:DSA-3510  View
771643 88780 CVE-2016-1961 URL:http://www.debian.org/security/2016/dsa-3510  View
771644 88780 CVE-2016-1961 DEBIAN:DSA-3520  View
771645 88780 CVE-2016-1961 URL:http://www.debian.org/security/2016/dsa-3520  View
771646 88780 CVE-2016-1961 GENTOO:GLSA-201605-06  View
771647 88780 CVE-2016-1961 URL:https://security.gentoo.org/glsa/201605-06  View
771648 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:0894  View
771649 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html  View
771650 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:1767  View
771651 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html  View
771652 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:1769  View
771653 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html  View
771654 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:1778  View
771655 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html  View
771656 88780 CVE-2016-1961 SUSE:SUSE-SU-2016:0909  View
771657 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html  View
771658 88780 CVE-2016-1961 SUSE:SUSE-SU-2016:0727  View
771659 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html  View
771660 88780 CVE-2016-1961 SUSE:SUSE-SU-2016:0777  View
771661 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html  View
771662 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:0731  View
771663 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html  View
771664 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:0733  View
771665 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html  View
771666 88780 CVE-2016-1961 SUSE:SUSE-SU-2016:0820  View
771667 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html  View
771668 88780 CVE-2016-1961 SUSE:openSUSE-SU-2016:0876  View
771669 88780 CVE-2016-1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html  View
771670 88780 CVE-2016-1961 UBUNTU:USN-2917-2  View
771671 88780 CVE-2016-1961 URL:http://www.ubuntu.com/usn/USN-2917-2  View
771672 88780 CVE-2016-1961 UBUNTU:USN-2917-3  View
771673 88780 CVE-2016-1961 URL:http://www.ubuntu.com/usn/USN-2917-3  View
771674 88780 CVE-2016-1961 UBUNTU:USN-2934-1  View
771675 88780 CVE-2016-1961 URL:http://www.ubuntu.com/usn/USN-2934-1  View
771676 88780 CVE-2016-1961 UBUNTU:USN-2917-1  View
771677 88780 CVE-2016-1961 URL:http://www.ubuntu.com/usn/USN-2917-1  View
771678 88780 CVE-2016-1961 SECTRACK:1035215  View

Related JVN