Mozilla Firefox Multiple Vulnerabilities

Last Update Date: 24 Oct 2016 14:35 Release Date: 24 Oct 2016 2892 Views

RISK: Medium Risk

TYPE: Clients - Browsers

Two vulnerabilities have been identified in Mozilla Firefox. Exploitation of these vulnerabilities may allow a remote attacker to execute arbitrary code and obtain potentially sensitive information on the target system.

Impact

Remote Code Execution
Information Disclosure

System / Technologies affected

Versions 48.x, 49.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (Firefox 49.0.2).
https://www.mozilla.org/en-US/security/advisories/mfsa2016-87/

Vulnerability Identifier

CVE-2016-5287
CVE-2016-5288

Source

SecurityTracker
US-CERT