Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2016-5257: Firefox ESR 45.x can crash or be hijacked remotely
CVE-2016-5257 · published 10 years ago
Summary
Versions of Firefox ESR up to 45.4 and related Mozilla browsers can be forced to stop working or potentially run unwanted code when accessed over the network. This happens because of flaws in the part of the program that displays web content. Upgrade to the latest Firefox ESR release (or Firefox 49+ for standard builds) as soon as possible to protect your systems.
What to do
- Update debian firefox-esr to version 45.4.0esr-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | firefox-esr |
< 45.4.0esr-1 Fix: upgrade to 45.4.0esr-1
|
| Debian:13 | debian | firefox-esr |
< 45.4.0esr-1 Fix: upgrade to 45.4.0esr-1
|
| Debian:14 | debian | firefox-esr |
< 45.4.0esr-1 Fix: upgrade to 45.4.0esr-1
|
| – | mozilla | firefox |
<= 48.0.2 45.1.0 45.1.1 45.2.0 45.3.0 cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
Original advisory text
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (m...
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
References
- https://security-tracker.debian.org/tracker/CVE-2016-5257 Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1912.html
- http://rhn.redhat.com/errata/RHSA-2016-1985.html
- http://www.debian.org/security/2016/dsa-3674
- http://www.debian.org/security/2016/dsa-3690
- http://www.mozilla.org/security/announce/2016/mfsa2016-85.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.h...
- http://www.securityfocus.com/bid/93049
- http://www.securitytracker.com/id/1036852
- https://bugzilla.mozilla.org/show_bug.cgi?id=1277213 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1287204 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1288555 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1288588 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1288780 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1289280 Issue Tracking
- https://security.gentoo.org/glsa/201701-15
- https://bugzilla.mozilla.org/show_bug.cgi?id=1293347 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1294095 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1294407 Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2016-86/
- https://www.mozilla.org/security/advisories/mfsa2016-88/
Severity
9.8
Critical
Type
CWE-119Buffer Overflow
Timeline
Published22 Sep 2016
Updated24 Oct 2026
First seen22 Sep 2026
Track software like this
Free during beta