crítica
CVE-2016-5297
Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Oracle. Más baja según Red Hat (media), Ubuntu (media).
Descripción
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Oracle Linux 5 | firefox | 45.5.0-1.0.1.el5_11 |
| Oracle Linux 6 | firefox | 45.5.0-1.0.1.el6_8 |
| Oracle Linux 7 | firefox | 45.5.0-1.0.1.el7_3 |
| debian 11 | firefox-esr | 45.5.0esr-1 |
| debian 12 | firefox-esr | 45.5.0esr-1 |
| debian 13 | firefox-esr | 45.5.0esr-1 |
| debian 14 | firefox-esr | 45.5.0esr-1 |
| debian 7 | firefox-esr, icedove | 45.5.1esr-1~deb7u1 y 1 más |
| debian 8 | firefox-esr, icedove | 45.5.0esr-1~deb8u1 y 1 más |
| echo | firefox-esr | 45.5.0esr-1 |
| ubuntu 12.04 | firefox, thunderbird | 50.0+build2-0ubuntu0.12.04.2 y 1 más |
| ubuntu 14.04 | firefox, thunderbird | 50.0+build2-0ubuntu0.14.04.2 y 1 más |
Mostrar las 20 entradas de 14 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Oracle Linux 5 | firefox | 45.5.0-1.0.1.el5_11 |
| Oracle Linux 6 | firefox | 45.5.0-1.0.1.el6_8 |
| Oracle Linux 7 | firefox | 45.5.0-1.0.1.el7_3 |
| debian 11 | firefox-esr | 45.5.0esr-1 |
| debian 12 | firefox-esr | 45.5.0esr-1 |
| debian 13 | firefox-esr | 45.5.0esr-1 |
| debian 14 | firefox-esr | 45.5.0esr-1 |
| debian 7 | firefox-esr | 45.5.1esr-1~deb7u1 |
| debian 7 | icedove | 1:45.5.1-1~deb7u1 |
| debian 8 | firefox-esr | 45.5.0esr-1~deb8u1 |
| debian 8 | icedove | 1:45.5.1-1~deb8u1 |
| echo | firefox-esr | 45.5.0esr-1 |
| ubuntu 12.04 | firefox | 50.0+build2-0ubuntu0.12.04.2 |
| ubuntu 12.04 | thunderbird | 1:45.5.1+build1-0ubuntu0.12.04.1 |
| ubuntu 14.04 | firefox | 50.0+build2-0ubuntu0.14.04.2 |
| ubuntu 14.04 | thunderbird | 1:45.5.1+build1-0ubuntu0.14.04.1 |
| ubuntu 16.04 | firefox | 50.0+build2-0ubuntu0.16.04.2 |
| ubuntu 16.04 | thunderbird | 1:45.5.1+build1-0ubuntu0.16.04.1 |
| ubuntu 16.10 | firefox | 50.0+build2-0ubuntu0.16.10.2 |
| ubuntu 16.10 | thunderbird | 1:45.5.1+build1-0ubuntu0.16.10.1 |
Referencias
- http://rhn.redhat.com/errata/RHSA-2016-2780.html
- http://www.securityfocus.com/bid/94336
- http://www.securitytracker.com/id/1037298
- https://access.redhat.com/security/cve/CVE-2016-5297
- https://bugzilla.mozilla.org/show_bug.cgi?id=1303678
- https://linux.oracle.com/cve/CVE-2016-5297.html
- https://linux.oracle.com/errata/ELSA-2016-2780.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-5297
Las 18 referencias
- https://security.gentoo.org/glsa/201701-15
- https://ubuntu.com/security/notices/USN-3124-1
- https://ubuntu.com/security/notices/USN-3141-1
- https://www.cve.org/CVERecord?id=CVE-2016-5297
- https://www.debian.org/security/2016/dsa-3730
- https://www.mozilla.org/en-US/security/advisories/mfsa2016-89/
- https://www.mozilla.org/security/advisories/mfsa2016-89/
- https://www.mozilla.org/security/advisories/mfsa2016-90/
- https://www.mozilla.org/security/advisories/mfsa2016-93/
- https://www.mozilla.org/security/announce/2016/mfsa2016-89.html