Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2016-5258

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.

  • Published: Aug 5, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-5258
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
oracle / linux 5.0 5.0.x
oracle / linux 6 6.x
oracle / linux 7 7.x
mozilla / firefox - 47.0.1.x
mozilla / firefox_esr 45.1.1 45.1.1.x
mozilla / firefox_esr 45.1.0 45.1.0.x
mozilla / firefox_esr 45.2.0 45.2.0.x
mozilla / firefox_esr 45.3.0 45.3.0.x