Vulnerability Details : CVE-2016-2837
Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2016-2837
Probability of exploitation activity in the next 30 days: 1.62%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 86 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2016-2837
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
6.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
2.8
|
3.4
|
NIST |
CWE ids for CVE-2016-2837
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-2837
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
[security-announce] openSUSE-SU-2016:2026-1: important: Security update
-
http://rhn.redhat.com/errata/RHSA-2016-1551.html
RHSA-2016:1551 - Security Advisory - Red Hat Customer Portal
-
http://www.mozilla.org/security/announce/2016/mfsa2016-77.html
Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback — MozillaVendor Advisory
-
https://security.gentoo.org/glsa/201701-15
Mozilla Firefox, Thunderbird: Multiple vulnerabilities (GLSA 201701-15) — Gentoo security
-
http://www.zerodayinitiative.com/advisories/ZDI-16-673
ZDI-16-673 | Zero Day Initiative
-
http://www.debian.org/security/2016/dsa-3640
Debian -- Security Information -- DSA-3640-1 firefox-esr
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html
[security-announce] openSUSE-SU-2016:1964-1: important: Security update
-
https://bugzilla.mozilla.org/show_bug.cgi?id=1274637
Bugzilla.mozilla.org is offlineIssue Tracking;Permissions Required
-
http://www.securityfocus.com/bid/92258
Mozilla Firefox Multiple Security Vulnerabilities
-
http://www.ubuntu.com/usn/USN-3044-1
USN-3044-1: Firefox vulnerabilities | Ubuntu security notices
-
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
Oracle Linux Bulletin - July 2016Third Party Advisory
-
http://www.securitytracker.com/id/1036508
Mozilla Firefox Multiple Flaws Let Remote Users Execute Arbitrary Code, Bypass Security Restrictions, Spoof Content, Modify Files, and Obtain Potentially Sensitive Information - SecurityTracker
Products affected by CVE-2016-2837
- cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:45.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:45.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:45.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:45.3.0:*:*:*:*:*:*:*