Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-5296

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird <

Description

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Thunderbird

  • unspecified to < 45.5affected

Mozilla Firefox ESR

  • unspecified to < 45.5affected

Mozilla Firefox

  • unspecified to < 50affected

References