CVE Catalog
CVE-2016-1962
CriticalSummary
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to full system compromise.
Recommendation
It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.