ByteOS Network

NVD Vulnerability Details :

CVE-2016-1931

Modified

Source-security@mozilla.org

Published At-31 Jan, 2016 | 18:59

Updated At-06 May, 2026 | 22:30

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	10.0	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Mozilla Corporation

>>firefox>>Versions up to 43.0.4(inclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

openSUSE

>>leap>>42.1

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>13.1

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>13.2

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html	security@mozilla.org	N/A
http://www.mozilla.org/security/announce/2016/mfsa2016-01.html	security@mozilla.org	Vendor Advisory
http://www.securityfocus.com/bid/81953	security@mozilla.org	N/A
http://www.securitytracker.com/id/1034825	security@mozilla.org	N/A
http://www.ubuntu.com/usn/USN-2880-1	security@mozilla.org	N/A
http://www.ubuntu.com/usn/USN-2880-2	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1180064	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1186973	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1206675	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1207298	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209358	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209365	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209366	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209368	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209546	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1222015	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1229825	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1231121	security@mozilla.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1234576	security@mozilla.org	N/A
https://security.gentoo.org/glsa/201605-06	security@mozilla.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2016/mfsa2016-01.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/81953	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1034825	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-2880-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-2880-2	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1180064	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1186973	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1206675	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1207298	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209358	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209365	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209366	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209368	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1209546	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1222015	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1229825	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1231121	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=1234576	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.gentoo.org/glsa/201605-06	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2016/mfsa2016-01.html

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/81953

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1034825

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-2880-1

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-2880-2

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1180064

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1186973

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1206675

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1207298

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1209358

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1209365

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1209366

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1209368

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1209546

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1222015

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1229825

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1231121

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1234576

Source: security@mozilla.org

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/201605-06

Source: security@mozilla.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html