CVE-2016-5251 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 73.32%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 ≤ 47.0.1
mozilla	firefox_esr	𝑥 ≤ 47.0.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

sid	132.0.1-1 fixed

firefox-esr

bookworm	115.14.0esr-1~deb12u1 fixed
bookworm (security)	128.4.0esr-1~deb12u1 fixed
bullseye	115.14.0esr-1~deb11u1 fixed
bullseye (security)	128.4.0esr-1~deb11u1 fixed
sid	128.4.0esr-1 fixed
trixie	128.3.1esr-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

firefox

precise	Fixed 48.0+build2-0ubuntu0.12.04.1 released
trusty	Fixed 48.0+build2-0ubuntu0.14.04.1 released
xenial	Fixed 48.0+build2-0ubuntu0.16.04.1 released

thunderbird

precise	not-affected
trusty	dne
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

MozillaFirefox

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaFirefox-devel

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise desktop 15 SP7	102.12.0-150200.152.90.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise sap 15 SP7	102.12.0-150200.152.90.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise server 15 SP7	102.12.0-150200.152.90.1 fixed

MozillaFirefox-translations-common

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaFirefox-translations-other

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html

http://www.mozilla.org/security/announce/2016/mfsa2016-66.html

http://www.securityfocus.com/bid/92260

http://www.securitytracker.com/id/1036508

http://www.ubuntu.com/usn/USN-3044-1

https://bugzilla.mozilla.org/show_bug.cgi?id=1255570

https://security.gentoo.org/glsa/201701-15