CVE-2016-1973: Use After Free
Published Mar 13, 2016
·Updated
Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.
Affected Software
4 affected components
Oracle Linux=5.0
Oracle Linux=6
Oracle Linux=7
Mozilla Firefox<=44.0.2
Event History
Mar 13, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1973?
CVE-2016-1973 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2016-1973?
To fix CVE-2016-1973, users should update Mozilla Firefox to version 45.0 or later.
3
Which versions of Firefox are affected by CVE-2016-1973?
CVE-2016-1973 affects Mozilla Firefox versions prior to 45.0.
4
What impact does CVE-2016-1973 have?
CVE-2016-1973 may allow remote attackers to execute arbitrary code or cause a denial of service due to a use-after-free vulnerability.
5
What is the cause of CVE-2016-1973?
CVE-2016-1973 is caused by a race condition in the GetStaticInstance function in the WebRTC implementation in Firefox.