CVE-2016-1972

High

Published: 13/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A race condition in libvpx in Mozilla Firefox before version 45.0 on Windows may allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

Risk Assessment

This vulnerability may lead to denial of service, affecting application availability and potentially creating other unspecified risks to the system.

Recommendation

It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability.

Other vulnerabilities in libvpx in Mozilla Firefox

CVE-2015-4486High
The decrease_ref_count function in libvpx in Mozilla Firefox before version 40.0 and Firefox ESR 38.x before version 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

Original NVD description (English source)

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.