[VU:791496] Mozilla Firefox SVG animation nsSMILTimeContainer use-after-free vulnerability

Severity High

CVEs 1

Overview

Mozilla Firefox contains a use-after-free vulnerability in the SVG animation functionality, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Impact

By convincing a use to view specially-crafted web content, a remote-unauthenticated attacker may be able to execute arbitrary code on an affected system.

Solution

Apply an update This issue is addressed in Tor Browser 6.0.7 and Mozilla Firefox versions 50.0.2 and 45.5.1 ESR, as well as Thunderbird 45.5.1.

ID

VU:791496

Severity

high

Severity from

CVE-2016-9079

URL

https://kb.cert.org/vuls/id/791496

Published

2016-11-30T20:11:26
(7 years ago)

Modified

2016-12-02T19:56:27
(7 years ago)

Rights

Other Advisories

Source	# ID	Name	URL
			https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/
			https://hg.mozilla.org/mozilla-central/rev/adcc39e3cad0
			https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
			https://blog.gdatasoftware.com/2016/11/29346-firefox-0-day-targeting-tor-users
			http://support.microsoft.com/kb/2458544

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date