UBUNTU-CVE-2016-2828
- Source
- https://ubuntu.com/security/CVE-2016-2828
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-2828.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2016-2828
- Upstream
- Downstream
- Related
- Published
- 2016-06-08T00:00:00Z
- Modified
- 2026-01-30T01:12:31.431764Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.
- References
Affected packages
Ubuntu:14.04:LTS / firefox
Package
- Name
- firefox
- Purl
- pkg:deb/ubuntu/firefox@47.0+build3-0ubuntu0.14.04.1?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed47.0+build3-0ubuntu0.14.04.1
Affected versions
24.*
24.0+build1-0ubuntu1
25.*
25.0+build3-0ubuntu0.13.10.1
28.*
28.0~b2+build1-0ubuntu2
28.0+build1-0ubuntu1
28.0+build2-0ubuntu1
28.0+build2-0ubuntu2
29.*
29.0+build1-0ubuntu0.14.04.2
30.*
30.0+build1-0ubuntu0.14.04.3
31.*
31.0+build1-0ubuntu0.14.04.1
32.*
32.0+build1-0ubuntu0.14.04.1
32.0.3+build1-0ubuntu0.14.04.1
33.*
33.0+build2-0ubuntu0.14.04.1
34.*
34.0+build2-0ubuntu0.14.04.1
35.*
35.0+build3-0ubuntu0.14.04.2
35.0.1+build1-0ubuntu0.14.04.1
36.*
36.0+build2-0ubuntu0.14.04.4
36.0.1+build2-0ubuntu0.14.04.1
36.0.4+build1-0ubuntu0.14.04.1
37.*
37.0+build2-0ubuntu0.14.04.1
37.0.1+build1-0ubuntu0.14.04.1
37.0.2+build1-0ubuntu0.14.04.1
38.*
38.0+build3-0ubuntu0.14.04.1
39.*
39.0+build5-0ubuntu0.14.04.1
39.0.3+build2-0ubuntu0.14.04.1
40.*
40.0+build4-0ubuntu0.14.04.1
40.0+build4-0ubuntu0.14.04.4
40.0.3+build1-0ubuntu0.14.04.1
41.*
41.0+build3-0ubuntu0.14.04.1
41.0.1+build2-0ubuntu0.14.04.1
41.0.2+build2-0ubuntu0.14.04.1
42.*
42.0+build2-0ubuntu0.14.04.1
43.*
43.0+build1-0ubuntu0.14.04.1
43.0.4+build3-0ubuntu0.14.04.1
44.*
44.0+build3-0ubuntu0.14.04.1
44.0.1+build2-0ubuntu0.14.04.1
44.0.2+build1-0ubuntu0.14.04.1
45.*
45.0+build2-0ubuntu0.14.04.1
45.0.1+build1-0ubuntu0.14.04.2
45.0.2+build1-0ubuntu0.14.04.1
46.*
46.0+build5-0ubuntu0.14.04.2
46.0.1+build1-0ubuntu0.14.04.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "firefox",
"binary_version": "47.0+build3-0ubuntu0.14.04.1"
},
{
"binary_name": "firefox-dev",
"binary_version": "47.0+build3-0ubuntu0.14.04.1"
},
{
"binary_name": "firefox-globalmenu",
"binary_version": "47.0+build3-0ubuntu0.14.04.1"
},
{
"binary_name": "firefox-mozsymbols",
"binary_version": "47.0+build3-0ubuntu0.14.04.1"
},
{
"binary_name": "firefox-testsuite",
"binary_version": "47.0+build3-0ubuntu0.14.04.1"
}
]
}
Ubuntu:16.04:LTS / firefox
Package
- Name
- firefox
- Purl
- pkg:deb/ubuntu/firefox@47.0+build3-0ubuntu0.16.04.1?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed47.0+build3-0ubuntu0.16.04.1
Affected versions
41.*
41.0.2+build2-0ubuntu1
42.*
42.0+build2-0ubuntu1
44.*
44.0+build3-0ubuntu2
44.0.1+build1-0ubuntu1
44.0.2+build1-0ubuntu1
45.*
45.0+build2-0ubuntu1
45.0.1+build1-0ubuntu1
45.0.2+build1-0ubuntu1
46.*
46.0+build5-0ubuntu0.16.04.2
46.0.1+build1-0ubuntu0.16.04.2
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "firefox",
"binary_version": "47.0+build3-0ubuntu0.16.04.1"
},
{
"binary_name": "firefox-dev",
"binary_version": "47.0+build3-0ubuntu0.16.04.1"
},
{
"binary_name": "firefox-globalmenu",
"binary_version": "47.0+build3-0ubuntu0.16.04.1"
},
{
"binary_name": "firefox-mozsymbols",
"binary_version": "47.0+build3-0ubuntu0.16.04.1"
},
{
"binary_name": "firefox-testsuite",
"binary_version": "47.0+build3-0ubuntu0.16.04.1"
}
]
}