CVE

Id
89640  
CVE No.
CVE-2016-2821  
Status
Candidate  
Description
Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.  
Phase
Assigned (20160301)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
776648 89640 CVE-2016-2821 CONFIRM:http://www.mozilla.org/security/announce/2016/mfsa2016-51.html  View
776649 89640 CVE-2016-2821 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1271460  View
776650 89640 CVE-2016-2821 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
776651 89640 CVE-2016-2821 DEBIAN:DSA-3600  View
776652 89640 CVE-2016-2821 URL:http://www.debian.org/security/2016/dsa-3600  View
776653 89640 CVE-2016-2821 REDHAT:RHSA-2016:1217  View
776654 89640 CVE-2016-2821 URL:https://access.redhat.com/errata/RHSA-2016:1217  View
776655 89640 CVE-2016-2821 SUSE:openSUSE-SU-2016:1552  View
776656 89640 CVE-2016-2821 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html  View
776657 89640 CVE-2016-2821 SUSE:openSUSE-SU-2016:1557  View
776658 89640 CVE-2016-2821 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html  View
776659 89640 CVE-2016-2821 SUSE:SUSE-SU-2016:1691  View
776660 89640 CVE-2016-2821 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html  View
776661 89640 CVE-2016-2821 UBUNTU:USN-2993-1  View
776662 89640 CVE-2016-2821 URL:http://www.ubuntu.com/usn/USN-2993-1  View
776663 89640 CVE-2016-2821 BID:91075  View
776664 89640 CVE-2016-2821 URL:http://www.securityfocus.com/bid/91075  View
776665 89640 CVE-2016-2821 SECTRACK:1036057  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1721 JVNDB-2016-002494 Linux Kernel の netfilter サブシステムにおける権限を取得される脆弱性 Linux Kernel の netfilter サブシステムは、特定のオフセットフィールドを検証しないため、権限を取得される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-3134 89640 7.2 8.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002494.html  View