Bug 963644 (CVE-2016-1944) - VUL-0: CVE-2016-1944,CVE-2016-1945,CVE-2016-1946: MozillaFirefox: Unsafe memory manipulation found through code inspection
Summary: VUL-0: CVE-2016-1944,CVE-2016-1945,CVE-2016-1946: MozillaFirefox: Unsafe memo...
Status: RESOLVED FIXED
Alias: CVE-2016-1944
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: All openSUSE 42.1
: P3 - Medium : Critical
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on: 963520
Blocks:
  Show dependency tree / graph
 
Reported: 2016-01-26 18:23 UTC by Andreas Stieger
Modified: 2020-04-05 18:20 UTC (History)
6 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Stieger 2016-01-26 18:23:13 UTC 
https://www.mozilla.org/en-US/security/advisories/mfsa2016-10/

Security researcher Ronald Crane reported three vulnerabilities affecting released code that were found through code inspection. These include a high rated memory safety issue in the ANGLE graphics library, a moderate rated potential wild pointer flaw when handling zip files, and a critical rated integer overflow during metadata parsing in Mozilla's use of the libstagefright library.

The first two issues do not all have clear mechanisms to be exploited through web content but are vulnerable if a mechanism can be found to trigger them. The libstagefright issue could potentially be triggered by a malicious MP4 format video file, allowing for arbitrary code execution. 

https://bugzilla.mozilla.org/show_bug.cgi?id=1186621
https://bugzilla.mozilla.org/show_bug.cgi?id=1214782
https://bugzilla.mozilla.org/show_bug.cgi?id=1232069

openSUSE only
Comment 1 Swamp Workflow Management 2016-01-26 23:01:07 UTC 
bugbot adjusting priority
Comment 2 Andreas Stieger 2016-01-27 10:40:35 UTC 
openSUSE update is running
Comment 3 Andreas Stieger 2016-02-01 21:26:25 UTC 
Releasing updates for openSUSE only bugs.
Comment 4 Swamp Workflow Management 2016-02-02 01:13:53 UTC 
openSUSE-SU-2016:0309-1: An update that fixes 14 vulnerabilities is now available.

Category: security (important)
Bug References: 963633,963634,963635,963637,963641,963643,963644,963645,963731
CVE References: CVE-2015-7208,CVE-2016-1930,CVE-2016-1931,CVE-2016-1933,CVE-2016-1935,CVE-2016-1937,CVE-2016-1938,CVE-2016-1939,CVE-2016-1942,CVE-2016-1943,CVE-2016-1944,CVE-2016-1945,CVE-2016-1946,CVE-2016-1947
Sources used:
openSUSE Leap 42.1 (src):    MozillaFirefox-44.0-12.2, mozilla-nspr-4.11-7.1, mozilla-nss-3.21-9.1
openSUSE 13.2 (src):    MozillaFirefox-44.0-59.1, mozilla-nspr-4.11-12.1, mozilla-nss-3.21-25.1