CVE-2016-5252

CVSS v3.0 8.8 (High)

CVSS v2.0 6.8 (Medium)

EPSS 1.46 % (87^th)

Affected Products 3

Advisories 11

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

Weaknesses

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2016-08-05 01:59:09
(8 years ago)
Updated Date: 2019-12-27 16:08:55
(4 years ago)

Affected Products

Mozilla

Oracle

Linux

Configuration #1

		CPE23	From	Up To
	Oracle Linux 5.0	cpe:2.3:o:oracle:linux:5.0
	Oracle Linux 6	cpe:2.3:o:oracle:linux:6
	Oracle Linux 7	cpe:2.3:o:oracle:linux:7

Configuration #2

	CPE23	Up To
Mozilla Firefox 47.0.1 and prior versions	cpe:2.3:a:mozilla:firefox	<= 47.0.1
Mozilla Firefox Esr 45.1.0	cpe:2.3:a:mozilla:firefox_esr:45.1.0
Mozilla Firefox Esr 45.1.1	cpe:2.3:a:mozilla:firefox_esr:45.1.1
Mozilla Firefox Esr 45.2.0	cpe:2.3:a:mozilla:firefox_esr:45.2.0
Mozilla Firefox Esr 45.3.0	cpe:2.3:a:mozilla:firefox_esr:45.3.0