critique
CVE-2016-5297
Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Oracle. Plus basse selon Red Hat (moyenne), Ubuntu (moyenne).
Description
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Oracle Linux 5 | firefox | 45.5.0-1.0.1.el5_11 |
| Oracle Linux 6 | firefox | 45.5.0-1.0.1.el6_8 |
| Oracle Linux 7 | firefox | 45.5.0-1.0.1.el7_3 |
| debian 11 | firefox-esr | 45.5.0esr-1 |
| debian 12 | firefox-esr | 45.5.0esr-1 |
| debian 13 | firefox-esr | 45.5.0esr-1 |
| debian 14 | firefox-esr | 45.5.0esr-1 |
| debian 7 | firefox-esr, icedove | 45.5.1esr-1~deb7u1 et 1 autres |
| debian 8 | firefox-esr, icedove | 45.5.0esr-1~deb8u1 et 1 autres |
| echo | firefox-esr | 45.5.0esr-1 |
| ubuntu 12.04 | firefox, thunderbird | 50.0+build2-0ubuntu0.12.04.2 et 1 autres |
| ubuntu 14.04 | firefox, thunderbird | 50.0+build2-0ubuntu0.14.04.2 et 1 autres |
Afficher les 20 entrées de 14 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Oracle Linux 5 | firefox | 45.5.0-1.0.1.el5_11 |
| Oracle Linux 6 | firefox | 45.5.0-1.0.1.el6_8 |
| Oracle Linux 7 | firefox | 45.5.0-1.0.1.el7_3 |
| debian 11 | firefox-esr | 45.5.0esr-1 |
| debian 12 | firefox-esr | 45.5.0esr-1 |
| debian 13 | firefox-esr | 45.5.0esr-1 |
| debian 14 | firefox-esr | 45.5.0esr-1 |
| debian 7 | firefox-esr | 45.5.1esr-1~deb7u1 |
| debian 7 | icedove | 1:45.5.1-1~deb7u1 |
| debian 8 | firefox-esr | 45.5.0esr-1~deb8u1 |
| debian 8 | icedove | 1:45.5.1-1~deb8u1 |
| echo | firefox-esr | 45.5.0esr-1 |
| ubuntu 12.04 | firefox | 50.0+build2-0ubuntu0.12.04.2 |
| ubuntu 12.04 | thunderbird | 1:45.5.1+build1-0ubuntu0.12.04.1 |
| ubuntu 14.04 | firefox | 50.0+build2-0ubuntu0.14.04.2 |
| ubuntu 14.04 | thunderbird | 1:45.5.1+build1-0ubuntu0.14.04.1 |
| ubuntu 16.04 | firefox | 50.0+build2-0ubuntu0.16.04.2 |
| ubuntu 16.04 | thunderbird | 1:45.5.1+build1-0ubuntu0.16.04.1 |
| ubuntu 16.10 | firefox | 50.0+build2-0ubuntu0.16.10.2 |
| ubuntu 16.10 | thunderbird | 1:45.5.1+build1-0ubuntu0.16.10.1 |
Références
- http://rhn.redhat.com/errata/RHSA-2016-2780.html
- http://www.securityfocus.com/bid/94336
- http://www.securitytracker.com/id/1037298
- https://access.redhat.com/security/cve/CVE-2016-5297
- https://bugzilla.mozilla.org/show_bug.cgi?id=1303678
- https://linux.oracle.com/cve/CVE-2016-5297.html
- https://linux.oracle.com/errata/ELSA-2016-2780.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-5297
Les 18 références
- https://security.gentoo.org/glsa/201701-15
- https://ubuntu.com/security/notices/USN-3124-1
- https://ubuntu.com/security/notices/USN-3141-1
- https://www.cve.org/CVERecord?id=CVE-2016-5297
- https://www.debian.org/security/2016/dsa-3730
- https://www.mozilla.org/en-US/security/advisories/mfsa2016-89/
- https://www.mozilla.org/security/advisories/mfsa2016-89/
- https://www.mozilla.org/security/advisories/mfsa2016-90/
- https://www.mozilla.org/security/advisories/mfsa2016-93/
- https://www.mozilla.org/security/announce/2016/mfsa2016-89.html