CVE-2016-9079

Katalog CVE

CVSS 7.5 · High KEV · sudah dieksploitasi EPSS 87,5%

Kerentanan Use After Free pada debian linux, redhat enterprise linux +8 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD. Masuk katalog KEV CISA pada 22 Juni 2023, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

Rincian

Terbit di NVD

11 Juni 2018

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

87,5% peluang dieksploitasi; lebih tinggi dari 99,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

Masuk KEV

22 Juni 2023

Tenggat CISA

13 Juli 2023 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1321066 exploit · issue tracking · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2016-92/ advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079 pemerintah AS
• http://rhn.redhat.com/errata/RHSA-2016-2843.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2850.html advisory pihak ketiga
• http://www.securityfocus.com/bid/94591 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1037370 advisory pihak ketiga · vdb entry
• https://security.gentoo.org/glsa/201701-15 advisory pihak ketiga
• https://security.gentoo.org/glsa/201701-35 advisory pihak ketiga
• https://www.debian.org/security/2016/dsa-3730 advisory pihak ketiga
• https://www.exploit-db.com/exploits/41151/ exploit · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/42327/ exploit · advisory pihak ketiga · vdb entry