Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.debian.org/security/2016/dsa-3640 | vendor-advisory x_refsource_DEBIAN |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1279146 | x_refsource_CONFIRM |
| http://www.securitytracker.com/id/1036508 | vdb-entry x_refsource_SECTRACK |
| http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html | x_refsource_CONFIRM |
| http://www.mozilla.org/security/announce/2016/mfsa2016-72.html | x_refsource_CONFIRM |
| http://www.ubuntu.com/usn/USN-3044-1 | vendor-advisory x_refsource_UBUNTU |
| http://www.securityfocus.com/bid/92258 | vdb-entry x_refsource_BID |
| http://rhn.redhat.com/errata/RHSA-2016-1551.html | vendor-advisory x_refsource_REDHAT |
| https://security.gentoo.org/glsa/201701-15 | vendor-advisory x_refsource_GENTOO |
| http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html | vendor-advisory x_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html | vendor-advisory x_refsource_SUSE |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|