http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html

http://www.debian.org/security/2016/dsa-3510

http://www.debian.org/security/2016/dsa-3520

http://www.mozilla.org/security/announce/2016/mfsa2016-23.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.securitytracker.com/id/1035215

http://www.ubuntu.com/usn/USN-2917-1

http://www.ubuntu.com/usn/USN-2917-2

http://www.ubuntu.com/usn/USN-2917-3

http://www.ubuntu.com/usn/USN-2934-1

http://zerodayinitiative.com/advisories/ZDI-16-198/

https://bugzilla.mozilla.org/show_bug.cgi?id=1246014

https://security.gentoo.org/glsa/201605-06

https://www.exploit-db.com/exploits/42484/

https://www.exploit-db.com/exploits/44294/

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.1.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.2.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.0.5:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.0.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.1.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:oracle:linux:6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:novell:opensuse:13.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:novell:opensuse:13.2:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

https://www.exploit-db.com/exploits/44294/ [No Types Assigned]

https://www.exploit-db.com/exploits/42484/ [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html [No Types Assigned]

http://www.debian.org/security/2016/dsa-3510 [No Types Assigned]

http://www.debian.org/security/2016/dsa-3520 [No Types Assigned]

http://www.securitytracker.com/id/1035215 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2917-1 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2917-2 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2917-3 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2934-1 [No Types Assigned]

https://security.gentoo.org/glsa/201605-06 [No Types Assigned]

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

Configuration 1
     OR
          *cpe:2.3:o:oracle:linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
          *cpe:2.3:o:oracle:linux:6.0:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Third Party Advisory

http://zerodayinitiative.com/advisories/ZDI-16-198/ No Types Assigned

http://zerodayinitiative.com/advisories/ZDI-16-198/ Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1246014 No Types Assigned

https://bugzilla.mozilla.org/show_bug.cgi?id=1246014 Issue Tracking

Configuration 1
     OR
          *cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:leap:42.1:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:opensuse:13.2:*:*:*:*:*:*:*
          *cpe:2.3:o:novell:opensuse:13.1:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

NVD-CWE-Other

Configuration 1
     OR
          *cpe:2.3:a:mozilla:firefox_esr:38.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:mozilla:firefox_esr:3

http://www.mozilla.org/security/announce/2016/mfsa2016-23.html No Types Assigned

http://www.mozilla.org/security/announce/2016/mfsa2016-23.html Advisory

<a href="http://cwe.mitre.org/data/definitions/416.html">CWE-416: Use After Free</a>

Desbordamiento inferior de entero en la clase nsHtml5TreeBuilder en el intérprete de cadenas HTML5 en Mozilla Firefox en versiones anteriores a 45.0 y Firefox ESR 38.x en versiones anteriores a 38.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (uso después de liberación de memoria) mediante el aprovechamiento del manejo incorrecto de las etiquetas finales, según lo demostrado por el procesamiento incorrecto de SVG, también conocido como ZDI-CAN-3545.

Desbordamiento inferior de entero en la clase nsHtml5TreeBuilder en el analizador de cadenas HTML5 en Mozilla Firefox en versiones anteriores a 45.0 y Firefox ESR 38.x en versiones anteriores a 38.7 permiten a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (uso después de liberación) mediante el aprovechamiento del manejo incorrecto de las etiquetas finales, según lo demostrado por procesamiento SVG incorrecto, también conocido como ZDI-CAN-3545.