CVE-2016-2839: Input Validation
Last updated 24 July 2024
Other sources
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo cairosurfacegetextents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is CVE-2016-2839?
CVE-2016-2839 is a vulnerability in Mozilla Firefox that allows remote attackers to cause a denial of service (application crash) via a crafted video.
How severe is CVE-2016-2839?
CVE-2016-2839 has a severity score of 6.5 (medium).
Which versions of Mozilla Firefox are affected by CVE-2016-2839?
Mozilla Firefox versions up to and including 47.0.1 are affected by CVE-2016-2839.
How can I fix CVE-2016-2839 in Mozilla Firefox?
To fix CVE-2016-2839 in Mozilla Firefox, you need to update to version 48.0 or later.
Where can I find more information about CVE-2016-2839?
You can find more information about CVE-2016-2839 in the CVE entry, Mozilla Security Advisory, and Ubuntu Security Notice listed in the references.