NVD

Id
20582  
Name
CVE-2016-5258  
Description
Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-04  
Modified Date
2016-11-28  
Seq
2016-5258  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112667 20582 CVE-2016-5258 openSUSE-SU-2016:1964  View
112668 20582 CVE-2016-5258 openSUSE-SU-2016:2026  View
112669 20582 CVE-2016-5258 RHSA-2016:1551  View
112670 20582 CVE-2016-5258 DSA-3640  View
112671 20582 CVE-2016-5258 http://www.mozilla.org/security/announce/2016/mfsa2016-72.html  View
112672 20582 CVE-2016-5258 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
112673 20582 CVE-2016-5258 92258  View
112674 20582 CVE-2016-5258 USN-3044-1  View
112675 20582 CVE-2016-5258 https://bugzilla.mozilla.org/show_bug.cgi?id=1279146  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3376 JVNDB-2016-004149 Mozilla Firefox の WebRTC ソケットスレッドにおける任意のコードを実行される脆弱性 Mozilla Firefox の WebRTC ソケットスレッドには、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-5258 91764 CVE-2016-5258 20582 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004149.html 2016-08-02 2016-08-08 View