CVEvulnerability

CVE-2016-5258

8.8 HIGH Published 2016-08-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-08-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-416

Description

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.

Affected configurations

• oracle linux 5.0 • oracle linux 6 • oracle linux 7 • mozilla firefox (<= 47.0.1) • mozilla firefox 45.1.0 • mozilla firefox 45.1.1 • mozilla firefox 45.2.0 • mozilla firefox 45.3.0

Related

Weakness · CWE (1)

References