Published: 13/03/2016 Updated: 03/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The ServiceWorkerManager class in Mozilla Firefox prior to 45.0 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

USN-2917-1 introduced several regressions in Firefox ...

Mozilla Foundation Security Advisory 2016-22 Service Worker Manager out-of-bounds read in Service Worker Manager Announced March 8, 2016 Reporter Looben Yang Impact Critical Products Firefox Fixed in ...

The ServiceWorkerManager class in Mozilla Firefox before 450 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API ...

CWE-119 http://www.mozilla.org/security/announce/2016/mfsa2016-22.html https://bugzilla.mozilla.org/show_bug.cgi?id=1234949 https://security.gentoo.org/glsa/201605-06 http://www.ubuntu.com/usn/USN-2917-2 http://www.ubuntu.com/usn/USN-2917-1 http://www.securitytracker.com/id/1035215 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html http://www.ubuntu.com/usn/USN-2917-3 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html https://nvd.nist.gov https://usn.ubuntu.com/2917-1/

CVE-2016-1959

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect