NVD

Id
18796  
Name
CVE-2016-2811  
Description
Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-30  
Modified Date
2016-11-30  
Seq
2016-2811  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
104272 18796 CVE-2016-2811 openSUSE-SU-2016:1211  View
104273 18796 CVE-2016-2811 openSUSE-SU-2016:1251  View
104274 18796 CVE-2016-2811 http://www.mozilla.org/security/announce/2016/mfsa2016-42.html  View
104275 18796 CVE-2016-2811 1035692  View
104276 18796 CVE-2016-2811 USN-2936-1  View
104277 18796 CVE-2016-2811 USN-2936-2  View
104278 18796 CVE-2016-2811 USN-2936-3  View
104279 18796 CVE-2016-2811 https://bugzilla.mozilla.org/show_bug.cgi?id=1252330  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1653 JVNDB-2016-002426 Mozilla Firefox の Service Worker サブシステムの ServiceWorkerInfo クラスにおける任意のコードを実行される脆弱性 Mozilla Firefox の Service Worker サブシステムの ServiceWorkerInfo クラスには、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-2811 89317 CVE-2016-2811 18796 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002426.html 2016-04-26 2016-05-06 View