CVE-2016-1970

High

Published: 13/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before version 45.0 on Windows may allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact.

Risk Assessment

The organization may be exposed to remote attacks that could lead to system crashes or other unforeseen security issues.

Recommendation

It is recommended to update Mozilla Firefox to version 45.0 or later to mitigate this vulnerability.

Other vulnerabilities in Mozilla Firefox (WebRTC implementation)

CVE-2016-1971High
The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before version 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.

Original NVD description (English source)

Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.