CVE

Id
92074  
CVE No.
CVE-2016-5255  
Status
Candidate  
Description
Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.  
Phase
Assigned (20160603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
789045 92074 CVE-2016-5255 CONFIRM:http://www.mozilla.org/security/announce/2016/mfsa2016-71.html  View
789046 92074 CVE-2016-5255 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1212356  View
789047 92074 CVE-2016-5255 SUSE:openSUSE-SU-2016:1964  View
789048 92074 CVE-2016-5255 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html  View
789049 92074 CVE-2016-5255 SUSE:openSUSE-SU-2016:2026  View
789050 92074 CVE-2016-5255 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html  View
789051 92074 CVE-2016-5255 UBUNTU:USN-3044-1  View
789052 92074 CVE-2016-5255 URL:http://www.ubuntu.com/usn/USN-3044-1  View
789053 92074 CVE-2016-5255 BID:92260  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4660 JVNDB-2016-005433 Oracle Java SE における AWT に関する脆弱性 Oracle Java SE には、AWT に関する処理に不備があるため、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2016-5568 92074 9.3 9.6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005433.html  View