SB2016031301 - Denial of service in Mozilla Firefox
Published: March 13, 2016 Updated: May 26, 2020
Security Bulletin ID
SB2016031301
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Denial of service (CVE-ID: CVE-2016-1954)
The vulnerability allows a remote unauthenticated user to cause DoS conditions on the target system.The weakness is due to improper input validation. By convincing a victim to visit a malicious website, attackers can overwrite an add-on resource that may lead to denial of service or privilege escalation.
Successful exploitation of the vulnerability will result in denial of service on the vulnerable system.
Remediation
Install update from vendor's website.