Bug 1015541 – VUL-0: CVE-2016-9893: MozillaFirefox: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6

Bug 1015541 - (CVE-2016-9893) VUL-0: CVE-2016-9893: MozillaFirefox: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6

(CVE-2016-9893)
Summary:	VUL-0: CVE-2016-9893: MozillaFirefox: Memory safety bugs fixed in Firefox 50....

Status:	RESOLVED FIXED

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Critical
Target Milestone:	---
Assigned To:	Petr Cerny
QA Contact:	Security Team bot

URL:
Whiteboard:	CVSSv2:SUSE:CVE-2016-9894:6.8:(AV:N/...
Keywords:

Depends on:
Blocks:	1015422
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2016-12-14 13:27 UTC by Marcus Meissner
Modified:	2019-05-01 12:55 UTC (History)
CC List:	0 users

See Also:
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marcus Meissner 2016-12-14 13:27:06 UTC

Security vulnerabilities fixed in Firefox 50.1
https://www.mozilla.org/en-US/security/advisories/mfsa2016-94/

Discovered by: Mozilla developers
Mozilla developers and community members Jan de Mooij, Iris Hsiao, Christian Holler, Carsten Book, Timothy Nikkel, Christoph Diehl, Olli Pettay, Raymond Forbes, and Boris Zbarsky reported memory safety bugs present in Firefox 50.0.2 and Firefox ESR 45.5.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1319524%2C1298773%2C1299098%2C1309834%2C1312609%2C1313212%2C1317805%2C1312548%2C1315631%2C1287912

Comment 1 Swamp Workflow Management 2016-12-14 23:02:56 UTC

bugbot adjusting priority

Comment 2 Petr Cerny 2017-08-10 14:52:30 UTC

Released

Comment 3 Petr Cerny 2017-08-10 14:54:52 UTC

Released.