CVE-2016-5263

CVSS v3.0 8.8 (High)

CVSS v2.0 6.8 (Medium)

EPSS 0.69 % (80^th)

Affected Products 3

Advisories 11

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."

Weaknesses

CWE-704: Incorrect Type Conversion or Cast

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2016-08-05 01:59:19
(8 years ago)
Updated Date: 2019-12-27 16:08:55
(4 years ago)

Affected Products

Mozilla

Oracle

Linux

Configuration #1

	CPE23	Up To
Mozilla Firefox 47.0.1 and prior versions	cpe:2.3:a:mozilla:firefox	<= 47.0.1
Mozilla Firefox Esr 45.1.0	cpe:2.3:a:mozilla:firefox_esr:45.1.0
Mozilla Firefox Esr 45.1.1	cpe:2.3:a:mozilla:firefox_esr:45.1.1
Mozilla Firefox Esr 45.2.0	cpe:2.3:a:mozilla:firefox_esr:45.2.0
Mozilla Firefox Esr 45.3.0	cpe:2.3:a:mozilla:firefox_esr:45.3.0

Configuration #2

		CPE23	From	Up To
	Oracle Linux 5.0	cpe:2.3:o:oracle:linux:5.0
	Oracle Linux 6	cpe:2.3:o:oracle:linux:6
	Oracle Linux 7	cpe:2.3:o:oracle:linux:7