Test ID:	1.3.6.1.4.1.25623.1.2.1.2016.85
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2016-85) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: CVE-2016-2827: Out-of-bounds read in mozilla::net::IsValidReferrerPolicy A content security policy (CSP) containing a referrer directive with no values can cause a non-exploitable crash. CVE-2016-5270: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString An out-of-bounds write of a boolean value during text conversion with some unicode characters CVE-2016-5271: Out-of-bounds read in PropertyProvider::GetSpacingInternal An out-of-bounds read during the processing of text runs in some pages using display:contents. CVE-2016-5272: Bad cast in nsImageGeometryMixin A bad cast when processing layout with input elements can result in a potentially exploitable crash. CVE-2016-5273: crash in mozilla::a11y::HyperTextAccessible::GetChildOffset A potentially exploitable crash in accessibility. CVE-2016-5276: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList A use-after-free vulnerability triggered by setting a aria-owns attribute. CVE-2016-5274: use-after-free in nsFrameManager::CaptureFrameState A use-after-free issue in web animations during restyling. CVE-2016-5277: Heap-use-after-free in nsRefreshDriver::Tick A use-after-free vulnerability with web animations when destroying a timeline. CVE-2016-5275: Buffer overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions A buffer overflow when working with empty filters during canvas rendering. CVE-2016-5278: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame A potentially exploitable crash caused by a buffer overflow while encoding image frames to images. CVE-2016-5279: Full local path of files is available to web pages after drag and drop The full path to local files is available to scripts when local files are drag and dropped into Firefox. CVE-2016-5280: Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap Use-after-free vulnerability when changing text direction. CVE-2016-5281: use-after-free in DOMSVGLength Use-after-free vulnerability when manipulating SVG format content through script. CVE-2016-5282: Don't allow content to request favicons from non-whitelisted schemes Favicons can be loaded through non-whitelisted protocols, such as jar:. CVE-2016-5283: Iframe src fragment timing attack can reveal cross-origin data A timing attack vulnerability using iframes to potentially reveal private data using document resizes and link colors. CVE-2016-5284: Add-on update site certificate pin expiration Due to flaws in the process we used to update 'Preloaded Public Key Pinning' in our releases, the pinning for add-on updates became ineffective in early September. An attacker who was able to get a mis-issued certificate for a Mozilla web site could send malicious add-on updates to users on networks controlled by the attacker. Users who have not installed any add-ons are not affected. CVE-2016-5256: Memory safety bugs fixed in Firefox 49 Mozilla ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: Firefox version(s) below 49. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2827 BugTraq ID: 93052 http://www.securityfocus.com/bid/93052 https://security.gentoo.org/glsa/201701-15 http://www.securitytracker.com/id/1036852 Common Vulnerability Exposure (CVE) ID: CVE-2016-5256 Common Vulnerability Exposure (CVE) ID: CVE-2016-5257 BugTraq ID: 93049 http://www.securityfocus.com/bid/93049 Debian Security Information: DSA-3674 (Google Search) http://www.debian.org/security/2016/dsa-3674 Debian Security Information: DSA-3690 (Google Search) http://www.debian.org/security/2016/dsa-3690 RedHat Security Advisories: RHSA-2016:1912 http://rhn.redhat.com/errata/RHSA-2016-1912.html RedHat Security Advisories: RHSA-2016:1985 http://rhn.redhat.com/errata/RHSA-2016-1985.html Common Vulnerability Exposure (CVE) ID: CVE-2016-5270 Common Vulnerability Exposure (CVE) ID: CVE-2016-5271 Common Vulnerability Exposure (CVE) ID: CVE-2016-5272 Common Vulnerability Exposure (CVE) ID: CVE-2016-5273 Common Vulnerability Exposure (CVE) ID: CVE-2016-5274 Common Vulnerability Exposure (CVE) ID: CVE-2016-5275 Common Vulnerability Exposure (CVE) ID: CVE-2016-5276 Common Vulnerability Exposure (CVE) ID: CVE-2016-5277 Common Vulnerability Exposure (CVE) ID: CVE-2016-5278 Common Vulnerability Exposure (CVE) ID: CVE-2016-5279 Common Vulnerability Exposure (CVE) ID: CVE-2016-5280 Common Vulnerability Exposure (CVE) ID: CVE-2016-5281 http://www.geeknik.net/7gr1u98b9 Common Vulnerability Exposure (CVE) ID: CVE-2016-5282 Common Vulnerability Exposure (CVE) ID: CVE-2016-5283 Common Vulnerability Exposure (CVE) ID: CVE-2016-5284 https://hackernoon.com/tor-browser-exposed-anti-privacy-implantation-at-mass-scale-bd68e9eb1e95 http://seclists.org/dailydave/2016/q3/51
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.