Vulnetix
Try Vulnetix Request Demo
CVE-2016-5264 PUBLISHED

Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.

EPSS 1.01% · 77.0th percentile

Risk Scores

EPSS Score
1.01%
77.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSfirefox0, 41.0.2+build2-0ubuntu1, 42.0+build2-0ubuntu1
Ubuntu:14.04:LTSfirefox33.0+build2-0ubuntu0.14.04.1, 34.0+build2-0ubuntu0.14.04.1, 35.0+build3-0ubuntu0.14.04.2

Timeline

References

Open in Interactive Console →