CVE-2016-2818

High

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

SeverityHigh
CVSS8.8
Exploit probability—
ProductMozilla Firefox
PublishedJun 13, 2016
First seenJun 13, 2016

How to fix

Affected products

ProductAffected versionsFixed in
mozilla firefox45.1.0, 45.1.1, v ≤ 46.0.1—
debian debian_linux8.0—
redhat enterprise_linux_desktop5.0, 6.0, 7.0—
redhat enterprise_linux_for_ibm_z_systems5.0, 6.0, 7.0—
redhat enterprise_linux_for_ibm_z_systems_eus7.2—
redhat enterprise_linux_for_power_big_endian5.0, 6.0, 7.0—
redhat enterprise_linux_for_power_big_endian_eus7.2—
redhat enterprise_linux_for_power_little_endian7.0—
redhat enterprise_linux_for_power_little_endian_eus7.2—
redhat enterprise_linux_for_scientific_computing6.0—
redhat enterprise_linux_server5.0, 6.0, 7.0—
redhat enterprise_linux_server_aus7.2—
redhat enterprise_linux_server_eus7.2—
redhat enterprise_linux_workstation5.0, 6.0, 7.0—
novell suse_linux_enterprise_software_development_kit12.0—
novell suse_package_hub_for_suse_linux_enterprise12—
novell suse_linux_enterprise_desktop12.0—
novell suse_linux_enterprise_server12.0—
opensuse leap42.1—
opensuse opensuse13.1, 13.2—
canonical ubuntu_linux12.04, 14.04, 15.10, 16.04—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.