Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2016-1931

Date: January 31, 2016

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.

Severity Score

Related Resources (24)

https://bugzilla.mozilla.org/show_bug.cgi?id=1180064
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
http://www.ubuntu.com/usn/USN-2880-1
https://bugzilla.mozilla.org/show_bug.cgi?id=1186973
http://www.ubuntu.com/usn/USN-2880-2
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1231121
https://bugzilla.mozilla.org/show_bug.cgi?id=1234576
http://www.securitytracker.com/id/1034825
https://people.canonical.com/~ubuntu-security/cve/CVE-2016-1931
https://security.gentoo.org/glsa/201605-06
http://www.securityfocus.com/bid/81953
https://bugzilla.mozilla.org/show_bug.cgi?id=1207298
https://bugzilla.mozilla.org/show_bug.cgi?id=1209366
https://bugzilla.mozilla.org/show_bug.cgi?id=1209365
https://bugzilla.mozilla.org/show_bug.cgi?id=1229825
http://www.mozilla.org/security/announce/2016/mfsa2016-01.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1209368
https://bugzilla.mozilla.org/show_bug.cgi?id=1209546
https://nvd.nist.gov/vuln/detail/CVE-2016-1931
https://bugzilla.mozilla.org/show_bug.cgi?id=1206675
https://bugzilla.mozilla.org/show_bug.cgi?id=1209358
https://bugzilla.mozilla.org/show_bug.cgi?id=1222015
https://www.mend.io/vulnerability-database/CVE-2016-1931

Severity Score

Weakness Type (CWE)

Buffer Errors

CWE-119

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us