Attachment 177570 Details for Bug 214978 – vuln.xml fragment

vuln.xml fragment

vuln.xml_gecko (text/plain), 1.30 KB, created by Christoph Moench-Tegeder on 2016-12-01 12:52:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Christoph Moench-Tegeder

Created: 2016-12-01 12:52:38 UTC

Size: 1.30 KB

patch

obsolete

>  <vuln vid="18f39fb6-7400-4063-acaf-0806e92c094f">
>    <topic>Mozilla -- SVG Animation Remote Code Execution</topic>
>    <affects>
>      <package>
>	<name>firefox</name>
>	<range><lt>50.0.2,1</lt></range>
>      </package>
>      <package>
>	<name>firefox-esr</name>
>	<range><lt>45.5.1,1</lt></range>
>      </package>
>      <package>
>	<name>linux-firefox</name>
>	<range><lt>45.5.1,2</lt></range>
>      </package>
>      <package>
>	<name>thunderbird</name>
>	<range><lt>45.5.1</lt></range>
>      </package>
>      <package>
>	<name>linux-thunderbird</name>
>	<range><lt>45.5.1</lt></range>
>      </package>
>    </affects>
>    <description>
>      <body xmlns="http://www.w3.org/1999/xhtml">
>	<p>The Mozilla Foundation reports:</p>
>	<blockquote cite="https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/">
>	  <p>A use-after-free vulnerability in SVG Animation has been
>	     discovered. An exploit built on this vulnerability has been
>	     discovered in the wild targeting Firefox and Tor Browser
>	     users on Windows.</p>
>	</blockquote>
>      </body>
>    </description>
>    <references>
>      <cvename>CVE-2016-9079</cvename>
>      <url>https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/</url>
>    </references>
>    <dates>
>      <discovery>2016-11-30</discovery>
>      <entry>2016-12-01</entry>
>    </dates>
>  </vuln>

Actions: View

Attachments on bug 214978: 177570 | 177571 | 177572 | 177573 | 177574