Vulnerability Description
Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Ubuntu Linux | 12.04 |
| Opensuse | Leap | 42.1 |
| Opensuse | Opensuse | 13.1 |
| Mozilla | Firefox | <= 46.0.1 |
| Debian | Debian Linux | 8.0 |
References
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html
- http://www.debian.org/security/2016/dsa-3600
- http://www.mozilla.org/security/announce/2016/mfsa2016-56.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.h
- http://www.securityfocus.com/bid/91075
- http://www.securitytracker.com/id/1036057
- http://www.ubuntu.com/usn/USN-2993-1
- https://access.redhat.com/errata/RHSA-2016:1217
- https://bugzilla.mozilla.org/show_bug.cgi?id=1223810
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html
- http://www.debian.org/security/2016/dsa-3600
FAQ
What is CVE-2016-2828?
CVE-2016-2828 is a vulnerability with a CVSS score of 8.8 (HIGH). Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after dest...
How severe is CVE-2016-2828?
CVE-2016-2828 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2828?
Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux, Opensuse Leap, Opensuse Opensuse, Mozilla Firefox, Debian Debian Linux.