CVE-2016-1975 — Race Condition in Mozilla Firefox

CWE-362 — Race Condition4 documents4 sources
Severity
6.3MEDIUMNVD
EPSS
0.6%
top 30.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedMar 13
Latest updateMay 17

Description

Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

▶NVDmozilla/firefox44.0.2

🔴Vulnerability Details

1
GHSA
GHSA-q2gv-w495-jmxw: Multiple race conditions in dom/media/systemservices/CamerasChild↗2022-05-17
▶

📋Vendor Advisories

1
Red Hat
Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)↗2016-03-08
▶

💬Community

1
Bugzilla
CVE-2016-1970 CVE-2016-1971 CVE-2016-1972 CVE-2016-1975 CVE-2016-1976 Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)↗2016-03-08
▶