CVE-2016-1935: Buffer Overflow
Published Jan 31, 2016
·Updated
Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
Affected Software
19 affected components
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Oracle Linux=5.0
Oracle Linux=6
Oracle Linux=7
Mozilla Firefox<=43.0.4
Mozilla Firefox=38.0
Mozilla Firefox=38.1.0
Mozilla Firefox=38.2.0
Mozilla Firefox=38.3.0
Mozilla Firefox=38.4.0
Mozilla Firefox=38.5.0
Mozilla Firefox ESR=38.0
Mozilla Firefox ESR=38.1.0
Mozilla Firefox ESR=38.2.0
Mozilla Firefox ESR=38.3.0
Mozilla Firefox ESR=38.4.0
Mozilla Firefox ESR=38.5.0
Event History
Jan 31, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1935?
CVE-2016-1935 is classified as a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2016-1935?
To fix CVE-2016-1935, upgrade Mozilla Firefox to version 44.0 or later, or migrate to Firefox ESR version 38.6 or later.
3
Which versions of Firefox are affected by CVE-2016-1935?
CVE-2016-1935 affects Firefox versions prior to 44.0 and Firefox ESR versions prior to 38.6.
4
What platforms are impacted by CVE-2016-1935?
CVE-2016-1935 affects multiple platforms including openSUSE and Oracle Linux when running the vulnerable Firefox versions.
5
Can CVE-2016-1935 be exploited remotely?
Yes, CVE-2016-1935 can be exploited remotely via crafted WebGL content.