CVE-2016-9079
גבוהה 7.5 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
מדדים
- CVSS 3.1
-
7.5 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — סבירות ניצול
- 88% (אחוזון 100) נכון ל-25/7/2026
- CWE
- CWE-416
מוצרים מושפעים
debian: debian linux; redhat: enterprise linux; redhat: enterprise linux desktop; redhat: enterprise linux server; redhat: enterprise linux server aus; redhat: enterprise linux server eus; redhat: enterprise linux workstation; mozilla: thunderbird; microsoft: windows; mozilla: firefox; torproject: tor
קישורים
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066 ExploitIssue TrackingVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2016-92/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321066 ExploitIssue TrackingVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2016-92/ Vendor Advisory
- https://www.exploit-db.com/exploits/41151/ ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42327/ ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/41151/ ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42327/ ExploitThird Party AdvisoryVDB Entry
- http://rhn.redhat.com/errata/RHSA-2016-2843.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2850.html Third Party Advisory