NVD

Id
18821  
Name
CVE-2016-2837  
Description
Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-04  
Modified Date
2017-01-02  
Seq
2016-2837  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
104524 18821 CVE-2016-2837 openSUSE-SU-2016:1964  View
104525 18821 CVE-2016-2837 openSUSE-SU-2016:2026  View
104526 18821 CVE-2016-2837 RHSA-2016:1551  View
104527 18821 CVE-2016-2837 DSA-3640  View
104528 18821 CVE-2016-2837 http://www.mozilla.org/security/announce/2016/mfsa2016-77.html  View
104529 18821 CVE-2016-2837 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
104530 18821 CVE-2016-2837 92258  View
104531 18821 CVE-2016-2837 USN-3044-1  View
104532 18821 CVE-2016-2837 http://www.zerodayinitiative.com/advisories/ZDI-16-673  View
104533 18821 CVE-2016-2837 https://bugzilla.mozilla.org/show_bug.cgi?id=1274637  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3367 JVNDB-2016-004140 Mozilla Firefox の EME API の ClearKey Content Decryption Module におけるヒープベースのバッファオーバーフローの脆弱性 Mozilla Firefox の Encrypted Media Extensions (EME) API の ClearKey Content Decryption Module (CDM) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-2837 89343 CVE-2016-2837 18821 6.8 6.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004140.html 2016-08-02 2016-12-09 View