NVD

Id
18274  
Name
CVE-2016-1960  
Description
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101087 18274 CVE-2016-1960 SUSE-SU-2016:0727  View
101088 18274 CVE-2016-1960 openSUSE-SU-2016:0731  View
101089 18274 CVE-2016-1960 openSUSE-SU-2016:0733  View
101090 18274 CVE-2016-1960 SUSE-SU-2016:0777  View
101091 18274 CVE-2016-1960 SUSE-SU-2016:0820  View
101092 18274 CVE-2016-1960 openSUSE-SU-2016:0876  View
101093 18274 CVE-2016-1960 openSUSE-SU-2016:0894  View
101094 18274 CVE-2016-1960 SUSE-SU-2016:0909  View
101095 18274 CVE-2016-1960 openSUSE-SU-2016:1767  View
101096 18274 CVE-2016-1960 openSUSE-SU-2016:1769  View
101097 18274 CVE-2016-1960 openSUSE-SU-2016:1778  View
101098 18274 CVE-2016-1960 DSA-3510  View
101099 18274 CVE-2016-1960 DSA-3520  View
101100 18274 CVE-2016-1960 http://www.mozilla.org/security/announce/2016/mfsa2016-23.html  View
101101 18274 CVE-2016-1960 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
101102 18274 CVE-2016-1960 1035215  View
101103 18274 CVE-2016-1960 USN-2917-1  View
101104 18274 CVE-2016-1960 USN-2917-2  View
101105 18274 CVE-2016-1960 USN-2917-3  View
101106 18274 CVE-2016-1960 USN-2934-1  View
101107 18274 CVE-2016-1960 http://zerodayinitiative.com/advisories/ZDI-16-198/  View
101108 18274 CVE-2016-1960 https://bugzilla.mozilla.org/show_bug.cgi?id=1246014  View
101109 18274 CVE-2016-1960 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
981 JVNDB-2016-001754 Mozilla Firefox の HTML5 文字列パーサの nsHtml5TreeBuilder クラスにおける整数アンダーフローの脆弱性 Mozilla Firefox の HTML5 文字列パーサの nsHtml5TreeBuilder クラスには、整数アンダーフローの脆弱性が存在します。 CVE-2016-1960 88466 CVE-2016-1960 18274 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001754.html 2016-03-08 2016-12-05 View