Think you have a false positive on this rule?

Sid 1-46781

Message

BROWSER-FIREFOX Mozilla Firefox nsHTMLDocument SetBody use-after-free attempt

Summary

Attempted Administrator Privilege Gain

Impact

Attempted Administrator Privilege Gain

CVE-2016-1961:

CVSS base score 8.8

CVSS impact score 5.9

CVSS exploitability score 2.8

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Detailed information

CVE-2016-1961: Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.

Affected systems

  • mozilla firefox 44.0.2
  • mozilla firefox_esr 38.0
  • mozilla firefox_esr 38.0.1
  • mozilla firefox_esr 38.0.5
  • mozilla firefox_esr 38.1.0
  • mozilla firefox_esr 38.1.1
  • mozilla firefox_esr 38.2.0
  • mozilla firefox_esr 38.2.1
  • mozilla firefox_esr 38.3.0
  • mozilla firefox_esr 38.4.0
  • mozilla firefox_esr 38.5.0
  • mozilla firefox_esr 38.5.1
  • mozilla firefox_esr 38.6.0
  • mozilla firefox_esr 38.6.1
  • mozilla thunderbird 38.6.0
  • novell leap 42.1
  • novell opensuse 13.1
  • novell opensuse 13.2
  • oracle linux 5.0
  • oracle linux 6.0
  • oracle linux 7.0
  • suse linux_enterprise 12.0

Ease of attack

CVE-2016-1961:

Access Vector

Access Complexity

Authentication

False positives

False negatives

Corrective action

Contributors

  • Cisco's Talos Intelligence Group

Additional References

  • bugzilla.mozilla.org/show_bug.cgi?id=1342258