p PatchFirst

CVE-2016-5290

CVE-2016-5290

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

CVSS 9.8 · Critical · EPSS 3.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • thunderbird

    Versions
    • ≥ unspecified, < 45.5: Affected (custom)

    Update to 45.5

  • firefox esr

    Versions
    • ≥ unspecified, < 45.5: Affected (custom)

    Update to 45.5

  • firefox

    Versions
    • ≥ unspecified, < 50: Affected (custom)

    Update to 50

  • firefox-esr Debian:12

    Affected ranges
    • ECOSYSTEM: < 45.5.0esr-1

    Update to 45.5.0esr-1

  • firefox-esr Debian:13

    Affected ranges
    • ECOSYSTEM: < 45.5.0esr-1

    Update to 45.5.0esr-1

  • firefox-esr Debian:14

    Affected ranges
    • ECOSYSTEM: < 45.5.0esr-1

    Update to 45.5.0esr-1

  • firefox Ubuntu:14.04:LTS

    Versions
    • 24.0+build1-0ubuntu1
    • 25.0+build3-0ubuntu0.13.10.1
    • 28.0~b2+build1-0ubuntu2
    • 28.0+build1-0ubuntu1
    • 28.0+build2-0ubuntu1
    • 28.0+build2-0ubuntu2
    • 29.0+build1-0ubuntu0.14.04.2
    • 30.0+build1-0ubuntu0.14.04.3
    • 31.0+build1-0ubuntu0.14.04.1
    • 32.0+build1-0ubuntu0.14.04.1
    • 32.0.3+build1-0ubuntu0.14.04.1
    • 33.0+build2-0ubuntu0.14.04.1
    • 34.0+build2-0ubuntu0.14.04.1
    • 35.0+build3-0ubuntu0.14.04.2
    • 35.0.1+build1-0ubuntu0.14.04.1
    • 36.0+build2-0ubuntu0.14.04.4
    • 36.0.1+build2-0ubuntu0.14.04.1
    • 36.0.4+build1-0ubuntu0.14.04.1
    • 37.0+build2-0ubuntu0.14.04.1
    • 37.0.1+build1-0ubuntu0.14.04.1
    • 37.0.2+build1-0ubuntu0.14.04.1
    • 38.0+build3-0ubuntu0.14.04.1
    • 39.0+build5-0ubuntu0.14.04.1
    • 39.0.3+build2-0ubuntu0.14.04.1
    • 40.0+build4-0ubuntu0.14.04.1
    • 40.0+build4-0ubuntu0.14.04.4
    • 40.0.3+build1-0ubuntu0.14.04.1
    • 41.0+build3-0ubuntu0.14.04.1
    • 41.0.1+build2-0ubuntu0.14.04.1
    • 41.0.2+build2-0ubuntu0.14.04.1
    • 42.0+build2-0ubuntu0.14.04.1
    • 43.0+build1-0ubuntu0.14.04.1
    • 43.0.4+build3-0ubuntu0.14.04.1
    • 44.0+build3-0ubuntu0.14.04.1
    • 44.0.1+build2-0ubuntu0.14.04.1
    • 44.0.2+build1-0ubuntu0.14.04.1
    • 45.0+build2-0ubuntu0.14.04.1
    • 45.0.1+build1-0ubuntu0.14.04.2
    • 45.0.2+build1-0ubuntu0.14.04.1
    • 46.0+build5-0ubuntu0.14.04.2
    • 46.0.1+build1-0ubuntu0.14.04.3
    • 47.0+build3-0ubuntu0.14.04.1
    • 48.0+build2-0ubuntu0.14.04.1
    • 49.0+build4-0ubuntu0.14.04.1
    • 49.0.2+build2-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 50.0+build2-0ubuntu0.14.04.2

    Update to 50.0+build2-0ubuntu0.14.04.2

  • thunderbird Ubuntu:14.04:LTS

    Versions
    • 1:24.0+build1-0ubuntu1
    • 1:24.0+build1-0ubuntu2
    • 1:24.1.1+build1-0ubuntu0.13.10.1
    • 1:24.1.1+build1-0ubuntu1
    • 1:24.2.0+build1-0ubuntu1
    • 1:24.4.0+build1-0ubuntu1
    • 1:24.5.0+build1-0ubuntu0.14.04.1
    • 1:24.6.0+build1-0ubuntu0.14.04.1
    • 1:31.0+build1-0ubuntu0.14.04.1
    • 1:31.1.1+build1-0ubuntu0.14.04.1
    • 1:31.1.2+build1-0ubuntu0.14.04.1
    • 1:31.2.0+build2-0ubuntu0.14.04.1
    • 1:31.3.0+build1-0ubuntu0.14.04.1
    • 1:31.4.0+build1-0ubuntu0.14.04.1
    • 1:31.5.0+build1-0ubuntu0.14.04.1
    • 1:31.6.0+build1-0ubuntu0.14.04.1
    • 1:31.7.0+build1-0ubuntu0.14.04.1
    • 1:31.8.0+build1-0ubuntu0.14.04.1
    • 1:38.2.0+build1-0ubuntu0.14.04.1
    • 1:38.3.0+build1-0ubuntu0.14.04.1
    • 1:38.4.0+build3-0ubuntu0.14.04.1
    • 1:38.5.1+build2-0ubuntu0.14.04.1
    • 1:38.6.0+build1-0ubuntu0.14.04.1
    • 1:38.7.2+build1-0ubuntu0.14.04.1
    • 1:38.8.0+build1-0ubuntu0.14.04.1
    • 1:45.2.0+build1-0ubuntu0.14.04.3
    • 1:45.3.0+build1-0ubuntu0.14.04.4
    • 1:45.4.0+build1-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 1:45.5.1+build1-0ubuntu0.14.04.1

    Update to 1:45.5.1+build1-0ubuntu0.14.04.1

  • firefox Ubuntu:16.04:LTS

    Versions
    • 41.0.2+build2-0ubuntu1
    • 42.0+build2-0ubuntu1
    • 44.0+build3-0ubuntu2
    • 44.0.1+build1-0ubuntu1
    • 44.0.2+build1-0ubuntu1
    • 45.0+build2-0ubuntu1
    • 45.0.1+build1-0ubuntu1
    • 45.0.2+build1-0ubuntu1
    • 46.0+build5-0ubuntu0.16.04.2
    • 46.0.1+build1-0ubuntu0.16.04.2
    • 47.0+build3-0ubuntu0.16.04.1
    • 48.0+build2-0ubuntu0.16.04.1
    • 49.0+build4-0ubuntu0.16.04.1
    • 49.0.2+build2-0ubuntu0.16.04.2
    Affected ranges
    • ECOSYSTEM: < 50.0+build2-0ubuntu0.16.04.2

    Update to 50.0+build2-0ubuntu0.16.04.2

  • thunderbird Ubuntu:16.04:LTS

    Versions
    • 1:38.3.0+build1-0ubuntu2
    • 1:38.5.1+build2-0ubuntu1
    • 1:38.6.0+build1-0ubuntu1
    • 1:38.7.2+build1-0ubuntu0.16.04.1
    • 1:38.8.0+build1-0ubuntu0.16.04.1
    • 1:45.2.0+build1-0ubuntu0.16.04.1
    • 1:45.3.0+build1-0ubuntu0.16.04.2
    • 1:45.4.0+build1-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 1:45.5.1+build1-0ubuntu0.16.04.1

    Update to 1:45.5.1+build1-0ubuntu0.16.04.1

Original sources

Check your server →