CVE-2016-1931: Buffer Overflow
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1931?
CVE-2016-1931 is a critical vulnerability that could lead to memory corruption and application crashes in affected versions of Mozilla Firefox.
How do I fix CVE-2016-1931?
To fix CVE-2016-1931, users should upgrade to Mozilla Firefox version 44.0 or later, or apply the patches provided by their Linux distribution.
Which versions of Firefox are affected by CVE-2016-1931?
CVE-2016-1931 affects all versions of Mozilla Firefox before 44.0, specifically versions up to and including 43.0.4.
Can CVE-2016-1931 allow remote code execution?
Yes, CVE-2016-1931 may allow remote attackers to execute arbitrary code due to memory corruption issues.
What types of systems are vulnerable to CVE-2016-1931?
CVE-2016-1931 impacts Mozilla Firefox as well as openSUSE systems running versions 42.1, 13.1, and 13.2.