Mozilla Firefox Use-After Free Memory Error in nsTArray_base::SwapArrayElements Lets Remote Users Execute Arbitrary Code and Web Cache Bug Lets Remote Users View Potentially Sensitive Information
|
|
SecurityTracker Alert ID: 1037077 |
|
SecurityTracker URL: http://securitytracker.com/id/1037077
|
|
CVE Reference:
CVE-2016-5287, CVE-2016-5288
(Links to External Site)
|
Date: Oct 21 2016
|
Impact:
Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 48.x, 49.x
|
Description:
Two vulnerabilities were reported in Mozilla Firefox. A remote user can execute arbitrary code on the target system. A remote user can obtain potentially sensitive information on the target system.
A remote user can create specially crafted content that, when loaded by the target user, will trigger a use-after-free memory error in nsTArray_base::SwapArrayElements() and execute arbitrary code on the target user's system [CVE-2016-5287]. Versions 49.x are affected.
Philipp reported this vulnerability.
A remote user can create specially crafted content that, when loaded by the target user, will view potentially sensitive URL and page content from the HTTP cache [CVE-2016-5288]. Systems with Electrolysis (e10s) disabled are affected. Versions 48.x and 49.x are affected.
Developers at Cliqz.com reported this vulnerability.
|
Impact:
A remote user can execute arbitrary code on the target system.
A remote user can obtain potentially sensitive information on the target system.
|
Solution:
The vendor has issued a fix (49.0.2).
The vendor advisory is available at:
https://www.mozilla.org/en-US/security/advisories/mfsa2016-87/
|
Vendor URL: www.mozilla.org/en-US/security/advisories/mfsa2016-87/ (Links to External Site)
|
Cause:
Access control error
|
Underlying OS: Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
