CVE-2016-1935

Description (CNA)

Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.debian.org/security/2016/dsa-3457
• http://www.debian.org/security/2016/dsa-3491
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
• http://www.securitytracker.com/id/1034825
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
• http://rhn.redhat.com/errata/RHSA-2016-0071.html
• http://www.ubuntu.com/usn/USN-2880-1
• http://www.ubuntu.com/usn/USN-2880-2
• http://rhn.redhat.com/errata/RHSA-2016-0258.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1220450
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
• http://www.ubuntu.com/usn/USN-2904-1
• https://security.gentoo.org/glsa/201605-06
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
• http://www.mozilla.org/security/announce/2016/mfsa2016-03.html
• http://www.securityfocus.com/bid/81952

ADP enrichment