Vulnerability Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | <= 43.0.4 |
| Opensuse | Leap | 42.1 |
| Opensuse | Opensuse | 13.1 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-01.htmlVendor Advisory
- http://www.securityfocus.com/bid/81953
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1180064
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186973
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206675
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207298
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209358
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209365
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209366
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209368
FAQ
What is CVE-2016-1931?
CVE-2016-1931 is a vulnerability with a CVSS score of 10.0 (CRITICAL). Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exec...
How severe is CVE-2016-1931?
CVE-2016-1931 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-1931?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Opensuse Leap, Opensuse Opensuse.