CVE-2016-5261: Integer Overflow

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1287266
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-86/
• http://www.mozilla.org/security/announce/2016/mfsa2016-75.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
• http://www.ubuntu.com/usn/USN-3044-1
• http://www.securityfocus.com/bid/92260
• http://www.debian.org/security/2016/dsa-3674
• https://security.gentoo.org/glsa/201701-15
• http://www.securitytracker.com/id/1036508
• http://rhn.redhat.com/errata/RHSA-2016-1912.html
• https://www.mozilla.org/security/advisories/mfsa2016-86/
• https://launchpad.net/bugs/cve/CVE-2016-5261
• https://www.mozilla.org/en-US/security/advisories/mfsa2016-75/
• https://security-tracker.debian.org/tracker/CVE-2016-5261
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5261
• https://nvd.nist.gov/vuln/detail/CVE-2016-5261
• https://ubuntu.com/security/CVE-2016-5261

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2016-86

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2016-5270
• CVE-2016-5272
• CVE-2016-5276
• CVE-2016-5274
• CVE-2016-5277
• CVE-2016-5278
• CVE-2016-5280
• CVE-2016-5281
• CVE-2016-5284
• CVE-2016-5250
• CVE-2016-5261
• CVE-2016-5257

Frequently Asked Questions

• What is CVE-2016-5261?

  CVE-2016-5261 is an integer overflow error in WebSockets during data buffering on incoming packets resulting in arbitrary code execution or denial of service in Mozilla Firefox before version 48.0 and Firefox ESR before version 45.4.

• How does CVE-2016-5261 affect Firefox?

  CVE-2016-5261 affects Mozilla Firefox versions before 48.0 and Firefox ESR versions before 45.4, allowing remote attackers to execute arbitrary code or cause a denial of service through crafted packets.

• What is the severity of CVE-2016-5261?

  CVE-2016-5261 has a severity rating of 8.8 (High).

• How can I fix CVE-2016-5261 in Mozilla Firefox?

  To fix CVE-2016-5261 in Mozilla Firefox, update to version 48.0 or later for regular Firefox, or version 45.4 or later for Firefox ESR.

• Where can I find more information about CVE-2016-5261?

  You can find more information about CVE-2016-5261 in the following references: [Link 1](https://bugzilla.mozilla.org/show_bug.cgi?id=1287266), [Link 2](https://www.mozilla.org/en-US/security/advisories/mfsa2016-86/), [Link 3](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5261).