CVE-2016-2824
published 2016-06-13CVE-2016-2824: The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a…
PriorityP434high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
1.72%
74.9th percentile
The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| debian | firefox-esr | — | — |
| mozilla | firefox | <= 46.0.1 | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| opensuse | leap | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_debian8.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-29xj-m56g-2pfp: The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47
ghsa_unreviewed·2022-05-14
CVE-2016-2824 [HIGH] CWE-119 GHSA-29xj-m56g-2pfp: The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47
The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
Debian
CVE-2016-2824: firefox - The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and...
vendor_debian·2016·CVSS 8.8
CVE-2016-2824 [HIGH] CVE-2016-2824: firefox - The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and...
The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
Scope: local
sid: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.htmlhttp://www.mozilla.org/security/announce/2016/mfsa2016-53.htmlhttp://www.securityfocus.com/bid/91075http://www.securitytracker.com/id/1036057https://bugzilla.mozilla.org/show_bug.cgi?id=1248580http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.htmlhttp://www.mozilla.org/security/announce/2016/mfsa2016-53.htmlhttp://www.securityfocus.com/bid/91075http://www.securitytracker.com/id/1036057https://bugzilla.mozilla.org/show_bug.cgi?id=1248580
2016-06-13
Published