CVE-2016-5254

Critical

Published: 05/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service by leveraging keyboard access to use the Alt key during selection of top-level menu items.

Risk Assessment

Organizations may be exposed to arbitrary code execution or application crashes, leading to potential data loss and service downtime.

Recommendation

It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.