Remote Yes

Type Arbitrary code execution

Description

Mozilla developers Christoph Diehl, Christian Holler, Gary Kwong, Nathan Froyd, Honza Bambas, Seth Fowler, and Michael Smith reported memory safety bugs present in Firefox 48. Some of these bugs showed evidence of memory corruption under certain circumstances could potentially exploited to run arbitrary code.

AVG-24 firefox 48.0.2-1 49.0-1 Critical Fixed

22 Sep 2016 ASA-201609-22 AVG-24 firefox Critical multiple issues

https://www.mozilla.org/en-US/security/advisories/mfsa2016-85/