cbcvebase.
CVE-2016-1952
published 2016-03-13

CVE-2016-1952: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a…

high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
debianfirefox< firefox 45.0-1 (sid)firefox 45.0-1 (sid)
debianfirefox-esr< firefox 45.0-1 (sid)firefox 45.0-1 (sid)
mozillafirefox<= 44.0.2
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox>= 0 < 45.0+build2-0ubuntu0.14.04.145.0+build2-0ubuntu0.14.04.1
mozillafirefox>= 0 < 45.0.2+build1-0ubuntu0.14.04.145.0.2+build1-0ubuntu0.14.04.1
mozillafirefox>= 0 < 45.0.1+build1-0ubuntu0.14.04.245.0.1+build1-0ubuntu0.14.04.2
mozillathunderbird<= 38.6.0
mozillathunderbird>= 0 < 1:38.7.2+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.1
mozillathunderbird>= 0 < 1:38.7.2+build1-0ubuntu0.16.04.11:38.7.2+build1-0ubuntu0.16.04.1
novellsuse_package_hub_for_suse_linux_enterprise
opensuseleap
opensuseopensuse

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH