Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esr | Aug 30, 2017 | Sep 22, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 22, 2016 |
| Centos_linux | — | Upgrade firefox | Sep 22, 2016 | Sep 22, 2016 |
| Debian | — | Upgrade firefox-esr | Sep 23, 2016 | Sep 22, 2016 |
| Freebsd | — | Upgrade linux-firefoxUpgrade libxulUpgrade firefoxUpgrade seamonkeyUpgrade firefox-esrUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkey | Nov 14, 2016 | Sep 20, 2016 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Sep 22, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade firefox | Nov 30, 2017 | Sep 22, 2016 |
| Mfsa2016 85 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 49.0 | Oct 25, 2016 | Sep 22, 2016 |
| Mfsa2016 86 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 45.4 | Oct 25, 2016 | Sep 22, 2016 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 45.4Upgrade to the latest version of Mozilla Thunderbird | Oct 25, 2016 | Sep 22, 2016 |
| Oracle Solaris | — | Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.5.1-0.175.3.16.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 45.4.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade mail/thunderbird to version 45.5.1-0.175.3.16.0.2.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 45.4.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 22, 2016 |
| Oracle_linux | — | Upgrade firefox | Sep 21, 2016 | Sep 20, 2016 |
| Redhat_linux | — | Upgrade firefoxUpgrade firefox-debuginfo | Oct 21, 2016 | Sep 21, 2016 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-other | Sep 26, 2016 | Sep 22, 2016 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Sep 22, 2016 | Sep 22, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub