vulnerability

Debian: CVE-2016-1962: firefox-esr, icedove, iceweasel -- security update

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Mar 13, 2016

Added

Mar 13, 2016

Modified

Mar 30, 2026

Description

Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.

Solutions

debian-upgrade-firefox-esrdebian-upgrade-icedovedebian-upgrade-iceweasel

References

CVE-2016-1962
https://attackerkb.com/topics/CVE-2016-1962
DEBIAN-DSA-3510
DEBIAN-DSA-3520
EUVD-EUVD-2016-3051
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-3051

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report