NVD

Id
18276  
Name
CVE-2016-1962  
Description
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101134 18276 CVE-2016-1962 SUSE-SU-2016:0727  View
101135 18276 CVE-2016-1962 openSUSE-SU-2016:0731  View
101136 18276 CVE-2016-1962 openSUSE-SU-2016:0733  View
101137 18276 CVE-2016-1962 SUSE-SU-2016:0777  View
101138 18276 CVE-2016-1962 SUSE-SU-2016:0820  View
101139 18276 CVE-2016-1962 openSUSE-SU-2016:0876  View
101140 18276 CVE-2016-1962 openSUSE-SU-2016:0894  View
101141 18276 CVE-2016-1962 SUSE-SU-2016:0909  View
101142 18276 CVE-2016-1962 DSA-3510  View
101143 18276 CVE-2016-1962 DSA-3520  View
101144 18276 CVE-2016-1962 http://www.mozilla.org/security/announce/2016/mfsa2016-25.html  View
101145 18276 CVE-2016-1962 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
101146 18276 CVE-2016-1962 1035215  View
101147 18276 CVE-2016-1962 USN-2917-1  View
101148 18276 CVE-2016-1962 USN-2917-2  View
101149 18276 CVE-2016-1962 USN-2917-3  View
101150 18276 CVE-2016-1962 https://bugzilla.mozilla.org/show_bug.cgi?id=1240760  View
101151 18276 CVE-2016-1962 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
983 JVNDB-2016-001756 Mozilla Firefox の mozilla::DataChannelConnection::Close 関数における任意のコードを実行される脆弱性 Mozilla Firefox の mozilla::DataChannelConnection::Close 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-1962 88468 CVE-2016-1962 18276 10 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001756.html 2016-03-08 2016-12-08 View