Vulnerability CVE-2016-9067: Information

Description

Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50.

Severity: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-9067

Published: June 12, 2018

Modified: July 30, 2018

Error type identifier: CWE-416

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
firefox	sisyphus	50.0-alt1	127.0-alt1	ALT-PU-2016-2307-1	172397	Fixed
firefox	p10	50.0-alt1	118.0.2-alt0.p10.1	ALT-PU-2016-2307-1	172397	Fixed
firefox	p9	50.0-alt1	105.0.1-alt0.c9.1	ALT-PU-2016-2307-1	172397	Fixed
firefox	p8	50.0-alt0.M80P.1	68.0.1-alt0.M80P.1	ALT-PU-2016-2324-1	172557	Fixed
firefox	c10f1	50.0-alt1	112.0.2-alt0.p10.1	ALT-PU-2016-2307-1	172397	Fixed
firefox	c9f2	50.0-alt1	105.0.1-alt0.c9.1	ALT-PU-2016-2307-1	172397	Fixed
firefox	c7	52.5.3-alt0.M70C.1	60.8.0-alt0.M70C.1	ALT-PU-2018-1225-1	200642	Fixed
firefox	p11	50.0-alt1	126.0.1-alt1	ALT-PU-2016-2307-1	172397	Fixed
firefox-esr	sisyphus	52.1.1-alt1	115.11.0-alt1	ALT-PU-2017-1578-1	182570	Fixed
firefox-esr	p10	52.1.1-alt1	115.11.0-alt1	ALT-PU-2017-1578-1	182570	Fixed
firefox-esr	p9	52.1.1-alt1	102.11.0-alt0.c9.1	ALT-PU-2017-1578-1	182570	Fixed
firefox-esr	p8	52.3.0-alt0.M80P.1	68.4.1-alt0.M80P.1	ALT-PU-2017-2230-1	188380	Fixed
firefox-esr	c10f1	52.1.1-alt1	115.9.1-alt0.c10.1	ALT-PU-2017-1578-1	182570	Fixed
firefox-esr	c9f2	52.1.1-alt1	102.12.0-alt0.c9.1	ALT-PU-2017-1578-1	182570	Fixed
firefox-esr	p11	52.1.1-alt1	115.11.0-alt1	ALT-PU-2017-1578-1	182570	Fixed

Hyperlink	Resource
https://www.mozilla.org/security/advisories/mfsa2016-89/	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1308922	Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1301777	Issue Tracking
1037298	Third Party Advisory VDB Entry
94337	Third Party Advisory VDB Entry

Affected configurations:
1. Configuration 1
  cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
  End excliding
  50.0

Version: v24.5.3