Remote Yes

Type Arbitrary code execution

Description

A use-after-free vulnerability has been discovered in the SVG Animation component of Firefox, leading to arbitrary code execution.

AVG-91 thunderbird 45.5.0-1 45.5.1-1 Critical Fixed

AVG-90 firefox 50.0-1 50.0.2-1 Critical Fixed

01 Dec 2016 ASA-201612-2 AVG-91 thunderbird Critical arbitrary code execution

01 Dec 2016 ASA-201612-1 AVG-90 firefox Critical multiple issues

https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/