Back to Database
Status published
High
CVE-2016-1953
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox...
Vulnerability Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-1953
Credits & Attribution
No credits recorded in the NVD database.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243583
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234425
- https://bugzilla.mozilla.org/show_bug.cgi?id=1236519
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248794
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238935
- https://bugzilla.mozilla.org/show_bug.cgi?id=1225618
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-16.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245866
- http://www.ubuntu.com/usn/USN-2917-1
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224363
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224361
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243555
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207958
- https://bugzilla.mozilla.org/show_bug.cgi?id=1241731
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1247236
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238558
- http://www.securitytracker.com/id/1035215
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- https://security.gentoo.org/glsa/201605-06
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224369
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205163
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199171
More from mozilla
View All →CVE-2025-66453
Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function
Medium
5.5
CVE-2022-29167
ReDoS vulnerability in header parsing in hawk
High
7.4
CVE-2021-21354
Open redirect in pollbot
High
7.4
CVE-2020-15660
Missing checks on Content-Type headers in geckodriver before 0.27.0 could...
High
8.8
CVE-2018-7753
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes...
Critical
9.8
Affected Vendor
mozilla
View all reports →Affected Software
firefox, thunderbird, suse package hub for suse linux enterprise, leap, opensuse
Vulnerable Versions:
0, 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1, 38.2.0, 38.2.1, 38.3.0, 38.4.0, 38.5.0, 38.5.1, 38.6.0, 38.6.1, 12, 42.1, 13.1, 13.2
Timeline
Official Publish:
March 13th, 2016
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.