CVE-2016-9898: Use After Free
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 118.0.2-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 91.12.0esr-1~deb10u1Fixed in 115.3.1esr-1~deb10u1Fixed in 102.15.0esr-1~deb11u1Fixed in 115.3.1esr-1~deb11u1Fixed in 102.15.1esr-1~deb12u1Fixed in 115.3.0esr-1~deb12u1Fixed in 115.3.0esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 45.6 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 50.1 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 45.6 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 45.6.0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2016-9898?
CVE-2016-9898 has been categorized as a high-severity vulnerability due to its potential for exploitation and resulting crashes.
How do I fix CVE-2016-9898?
To fix CVE-2016-9898, update to Firefox version 50.1 or later, Firefox ESR version 45.6 or later, or Thunderbird version 45.6 or later.
What versions of Firefox are affected by CVE-2016-9898?
CVE-2016-9898 affects all Firefox versions prior to 50.1.
Which Thunderbird version is impacted by CVE-2016-9898?
CVE-2016-9898 impacts Thunderbird versions before 45.6.
Is Firefox ESR affected by CVE-2016-9898?
Yes, Firefox ESR versions before 45.6 are affected by CVE-2016-9898.