CVE-2016-9066: Buffer Overflow
A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 118.0.2-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 91.12.0esr-1~deb10u1Fixed in 115.3.1esr-1~deb10u1Fixed in 102.15.0esr-1~deb11u1Fixed in 115.3.1esr-1~deb11u1Fixed in 102.15.1esr-1~deb12u1Fixed in 115.3.0esr-1~deb12u1Fixed in 115.3.0esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 45.5 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 50 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 45.5
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2016-5296
- CVE-2016-5294
- CVE-2016-5297
- CVE-2016-9066
- CVE-2016-5291
- CVE-2016-9074
- CVE-2016-5290
- CVE-2016-5292
- CVE-2016-5293
- CVE-2016-9064
- CVE-2016-9065
- CVE-2016-9067
- CVE-2016-9068
- CVE-2016-9072
- CVE-2016-9075
- CVE-2016-9077
- CVE-2016-5295
- CVE-2016-5298
- CVE-2016-5299
- CVE-2016-9061
- CVE-2016-9062
- CVE-2016-9070
- CVE-2016-9073
- CVE-2016-9076
- CVE-2016-9063
- CVE-2016-9071
- CVE-2016-5289
Frequently Asked Questions
What is CVE-2016-9066?
CVE-2016-9066 is a vulnerability that can cause a buffer overflow and potentially exploitable crash due to memory allocation issues in Thunderbird, Firefox ESR, and Firefox.
Which software is affected by CVE-2016-9066?
Thunderbird versions below 45.5, Firefox ESR versions below 45.5, and Firefox versions below 50 are affected by CVE-2016-9066.
What is the severity of CVE-2016-9066?
CVE-2016-9066 has a severity value of 7, categorized as high.
How does CVE-2016-9066 occur?
CVE-2016-9066 occurs due to memory allocation issues when handling large amounts of incoming data, leading to a buffer overflow and potential crash.
How can CVE-2016-9066 be fixed?
To fix CVE-2016-9066, it is recommended to update Thunderbird to version 45.5 or newer, Firefox ESR to version 45.5 or newer, and Firefox to version 50 or newer.