NVD

Id
20604  
Name
CVE-2016-5281  
Description
Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-22  
Modified Date
2017-01-17  
Seq
2016-5281  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112797 20604 CVE-2016-5281 DSA-3674  View
112798 20604 CVE-2016-5281 http://www.geeknik.net/7gr1u98b9  View
112799 20604 CVE-2016-5281 http://www.mozilla.org/security/announce/2016/mfsa2016-85.html  View
112800 20604 CVE-2016-5281 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
112801 20604 CVE-2016-5281 93049  View
112802 20604 CVE-2016-5281 https://bugzilla.mozilla.org/show_bug.cgi?id=1284690  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4114 JVNDB-2016-004887 Mozilla Firefox の DOMSVGLength クラスにおける任意のコードを実行される脆弱性 Mozilla Firefox の DOMSVGLength クラスには、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-5281 91787 CVE-2016-5281 20604 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004887.html 2016-09-13 2016-09-27 View