CVE-2016-2805

Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
38.0
mozillafirefox
38.0.1
mozillafirefox
38.0.5
mozillafirefox
38.1.0
mozillafirefox
38.1.1
mozillafirefox
38.2.0
mozillafirefox
38.2.1
mozillafirefox
38.3.0
mozillafirefox
38.4.0
mozillafirefox
38.5.0
mozillafirefox
38.5.1
mozillafirefox
38.6.0
mozillafirefox
38.6.1
mozillafirefox
38.7.0
mozillafirefox
38.7.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
132.0.1-1
fixed
firefox-esr
bookworm
115.14.0esr-1~deb12u1
fixed
bookworm (security)
128.4.0esr-1~deb12u1
fixed
bullseye
115.14.0esr-1~deb11u1
fixed
bullseye (security)
128.4.0esr-1~deb11u1
fixed
sid
128.4.0esr-1
fixed
trixie
128.3.1esr-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
precise
not-affected
trusty
dne
wily
not-affected
xenial
not-affected
mozjs38
precise
dne
trusty
dne
xenial
dne
yakkety
dne
zesty
Fixed 38.8.0~repack1-0ubuntu0.1
released
thunderbird
precise
Fixed 1:38.8.0+build1-0ubuntu0.12.04.1
released
trusty
Fixed 1:38.8.0+build1-0ubuntu0.14.04.1
released
wily
Fixed 1:38.8.0+build1-0ubuntu0.15.10.1
released
xenial
Fixed 1:38.8.0+build1-0ubuntu0.16.04.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
MozillaFirefox-translations-common
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
firefox
RHEL 6
0:45.1.0-1.el6_7
fixed
RHEL 7
0:45.1.0-1.el7_2
fixed
thunderbird
RHEL 6
0:38.8.0-2.el6_8
fixed
RHEL 7
0:38.8.0-1.el7_2
fixed