CVE-2016-2805
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...
8.8 HighFix available
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
4.65%Down 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2016-2805- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2016-2805- Updated
- 2026-11-02
EUVDEUVD-2016-3878 No score
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2016-3878- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-683q-h46v-73wp
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-683q-h46v-73wp- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-2805
Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
UBUNTU-CVE-2016-2805- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0158 No score
Updated firefox packages fix security vulnerabilities
Updated firefox packages fix security vulnerabilities:
Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2016-2805, CVE-2016-2806, CVE-2016-2807, CVE-2016-2808, CVE-2016-2814).
- Record
MGASA-2016-0158- Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2016-0254 No score
Updated thunderbird packages fix security vulnerability
Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2016-2805, CVE-2016-2807, CVE-2016-2818).
This update provides the next stable branch of Thunderbird, version 45.2.0.
- Record
MGASA-2016-0254- Updated
- 2026-11-02
OSVSUSE-SU-2016:1258-1 No score
Security update for MozillaFirefox
This update to MozillaFirefox 38.8.0 ESR fixes the following issues (bsc#977333):
- CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977374)
- CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977376)
- CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (bsc#977381)
- CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (bsc#977386)
- Record
SUSE-SU-2016:1258-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1342-1 No score
Security update for MozillaFirefox
This update to MozillaFirefox 38.8.0 ESR fixes the following security issues (bsc#977333):
- CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977374)
- CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977376)
- CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (bsc#977386)
- CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (bsc#977381)
- Record
SUSE-SU-2016:1342-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1374-1 No score
Security update for MozillaFirefox
This update to MozillaFirefox 38.8.0 ESR fixes the following security issues (bsc#977333):
- CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977374)
- CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977376)
- CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (bsc#977386)
- CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (bsc#977381)
- Record
SUSE-SU-2016:1374-1- Updated
- 2026-11-02
OSVUSN-2973-1 No score
thunderbird vulnerabilities
Christian Holler, Tyson Smith, and Phil Ringalda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2805, CVE-2016-2807)
Hanno Böck discovered that calculations with mp_div and mp_exptmod in NSS produce incorrect results in some circumstances, resulting in cryptographic weaknesses. (CVE-2016-1938)
A use-after-free was discovered in ssl3_HandleECDHServerKeyExchange in NSS. A remote attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-1978)
A use-after-free was discovered in PK11_ImportDERPrivateKeyInfoAndReturnKey in NSS. A remote attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-1979)
- Record
USN-2973-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
icedoveDebian:7 From an advisory covering 3 CVEs |
before 38.8.0-1~deb7u1, plus listed versions 10.0.12-111.0-116.0.2-117.0-117.0.10-1 Show 45 moreShow less17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-224.6.0-1~deb7u124.7.0-1~deb7u124.8.0-1~deb7u124.8.1-1~deb7u130.0~b1-131.0-131.0-231.0-331.0~b1-231.0~b2-131.1.2-131.2.0-131.2.0-1~deb7u131.3.0-131.3.0-1+powerpcspe131.3.0-1~deb7u131.4.0-131.4.0-1~deb7u1 |
38.8.0-1~deb7u1 |
iceweaselDebian:8 From an advisory covering 4 CVEs |
before 38.8.0esr-1~deb8u1, plus listed versions 31.6.0esr-131.7.0esr-1~deb7u131.7.0esr-1~deb8u131.8.0esr-1~deb7u131.8.0esr-1~deb8u1 Show 45 moreShow less32.0-132.0.3-132.0~b1-132.0~b3-132.0~b5-133.0-133.0-233.1-134.0-135.0-135.0.1-136.0-136.0-236.0.1-136.0.1-236.0.4-137.0-137.0.1-137.0.2-138.0-138.0-238.0.1-138.0.1-238.0.1-338.0.1-438.0.1-538.1.0esr-138.1.0esr-238.1.0esr-338.1.1esr-138.1.1esr-1~deb9u138.2.0esr-138.2.0esr-1~deb7u138.2.0esr-1~deb8u138.2.0esr-1~stretch38.2.1esr-138.2.1esr-1~deb7u138.2.1esr-1~deb8u138.3.0esr-138.3.0esr-1~deb7u138.3.0esr-1~deb8u138.4.0esr-138.4.0esr-1~deb7u138.4.0esr-1~deb8u138.5.0esr-1 |
38.8.0esr-1~deb8u1 |
iceweaselDebian:7 From an advisory covering 4 CVEs |
before 38.8.0esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 45 moreShow less11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1 |
38.8.0esr-1~deb7u1 |
icedoveDebian:8 From an advisory covering 3 CVEs |
before 38.8.0-1~deb8u1, plus listed versions 31.6.0-131.7.0-131.7.0-1~deb7u131.7.0-1~deb8u131.8.0-1~deb7u1 Show 36 moreShow less31.8.0-1~deb8u131.8.0-1~deb8u1+kbsd1132.0~b1-133.0~b1-134.0~b1-134.0~b1-236.0~b1-136.0~b1-238.0.1-138.0~b2-138.0~b5-138.1.0-138.2.0-138.2.0-1~stretch38.2.0-238.3.0-138.3.0-1~deb7u138.3.0-1~deb8u138.3.0-238.4.0-138.4.0-1~deb7u138.4.0-1~deb8u138.5.0-138.5.0-1~deb7u138.5.0-1~deb8u138.6.0-138.6.0-1~deb7u138.6.0-1~deb8u138.7.0-138.7.0-1~deb7u138.7.0-1~deb8u138.7.0-1~deb8u238.7.0-1~deb8u338.7.2-138.8.0-1~deb7u138.8.0-1~deb7u1.1 |
38.8.0-1~deb8u1 |
firefoxMageia:5 From an advisory covering 5 CVEs |
before 38.8.0-1.mga5 | 38.8.0-1.mga5 |
firefox-l10nMageia:5 From an advisory covering 5 CVEs |
before 38.8.0-1.mga5 | 38.8.0-1.mga5 |
thunderbirdMageia:5 From an advisory covering 3 CVEs |
before 45.2.0-1.1.mga5 | 45.2.0-1.1.mga5 |
thunderbird-l10nMageia:5 From an advisory covering 3 CVEs |
before 45.2.0-1.mga5 | 45.2.0-1.mga5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:45.1.0-1.el5_11 | 0:45.1.0-1.el5_11 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:45.1.0-1.el5_11 | 0:45.1.0-1.el5_11 |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:45.1.0-1.el5_11 | 0:45.1.0-1.el5_11 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:45.1.0-1.el5_11 | 0:45.1.0-1.el5_11 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:45.1.0-1.el6_7 | 0:45.1.0-1.el6_7 |
firefoxRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:45.1.0-1.el7_2 | 0:45.1.0-1.el7_2 |
firefox-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:45.1.0-1.el7_2 | 0:45.1.0-1.el7_2 |
firefoxRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:45.1.0-1.el7_2 | 0:45.1.0-1.el7_2 |
firefox-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:45.1.0-1.el7_2 | 0:45.1.0-1.el7_2 |
firefoxRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:45.1.0-1.el7_2 | 0:45.1.0-1.el7_2 |
firefox-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:45.1.0-1.el7_2 | 0:45.1.0-1.el7_2 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:38.8.0-1.el5_11 | 0:38.8.0-1.el5_11 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:38.8.0-1.el5_11 | 0:38.8.0-1.el5_11 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 0:38.8.0-1.el5_11 | 0:38.8.0-1.el5_11 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs |
before 0:38.8.0-1.el5_11 | 0:38.8.0-1.el5_11 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:38.8.0-2.el6_8 | 0:38.8.0-2.el6_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:38.8.0-2.el6_8 | 0:38.8.0-2.el6_8 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:38.8.0-2.el6_8 | 0:38.8.0-2.el6_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:38.8.0-2.el6_8 | 0:38.8.0-2.el6_8 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:38.8.0-2.el6_8 | 0:38.8.0-2.el6_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:38.8.0-2.el6_8 | 0:38.8.0-2.el6_8 |
thunderbirdRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:38.8.0-1.el7_2 | 0:38.8.0-1.el7_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:38.8.0-1.el7_2 | 0:38.8.0-1.el7_2 |
thunderbirdRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:38.8.0-1.el7_2 | 0:38.8.0-1.el7_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:38.8.0-1.el7_2 | 0:38.8.0-1.el7_2 |
thunderbirdRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:38.8.0-1.el7_2 | 0:38.8.0-1.el7_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:38.8.0-1.el7_2 | 0:38.8.0-1.el7_2 |
MozillaFirefoxSUSE:Linux Enterprise Desktop 12 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 4 CVEs |
before 38.8.0esr-66.2 | 38.8.0esr-66.2 |
MozillaFirefoxSUSE:Linux Enterprise Server 11 SP2-LTSS From an advisory covering 4 CVEs |
before 38.8.0esr-40.1 | 38.8.0esr-40.1 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:OpenStack Cloud 5 From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:OpenStack Cloud 5 From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:OpenStack Cloud 5 From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:Manager 2.1 From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Manager 2.1 From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Manager 2.1 From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:Manager Proxy 2.1 From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Manager Proxy 2.1 From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Manager Proxy 2.1 From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 11 SP3-LTSS From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Linux Enterprise Server 11 SP3-LTSS From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Linux Enterprise Server 11 SP3-LTSS From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Linux Enterprise Server 11 SP3-TERADATA From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 4 CVEs |
before 38.8.0esr-40.5 | 38.8.0esr-40.5 |
mozilla-nsprSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 4 CVEs |
before 4.12-26.1 | 4.12-26.1 |
mozilla-nssSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 4 CVEs |
before 3.20.2-30.1 | 3.20.2-30.1 |
thunderbirdUbuntu:14.04:LTS |
before 1:38.8.0+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 19 moreShow less1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.1 |
1:38.8.0+build1-0ubuntu0.14.04.1 |
thunderbirdUbuntu:16.04:LTS |
before 1:38.8.0+build1-0ubuntu0.16.04.1, plus listed versions 1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.1 |
1:38.8.0+build1-0ubuntu0.16.04.1 |
thunderbirdUbuntu:14.04:LTS From an advisory covering 5 CVEs |
before 1:38.8.0+build1-0ubuntu0.14.04.1, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 19 moreShow less1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.1 |
1:38.8.0+build1-0ubuntu0.14.04.1 |
thunderbirdUbuntu:16.04:LTS From an advisory covering 5 CVEs |
before 1:38.8.0+build1-0ubuntu0.16.04.1, plus listed versions 1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.1 |
1:38.8.0+build1-0ubuntu0.16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-2805 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published April 27, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.65%, the 91st percentile. Fixed in thunderbird 1:38.8.0+build1-0ubuntu0.14.04.1.
References
debian.org/security/2016/dsa-3576
mozilla.org/security/announce/2016/mfsa2016-39.html
oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
rhn.redhat.com/errata/RHSA-2016-0695.html
securitytracker.com/id/1035692
lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
Show 73 moreShow less
ubuntu.com/usn/USN-2973-1
security.gentoo.org/glsa/201701-15
bugzilla.mozilla.org/show_bug.cgi?id=1241731
nvd.nist.gov/vuln/detail/CVE-2016-2805
github.com/advisories/GHSA-683q-h46v-73wp
advisories.mageia.org/MGASA-2016-0158.html
bugs.mageia.org/show_bug.cgi?id=18278
access.redhat.com/errata/RHSA-2016:0695
bugzilla.redhat.com/show_bug.cgi?id=1330266
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0695.json
cve.org/CVERecord?id=CVE-2016-1526
talosintel.com/reports/TALOS-2016-0061
suse.com/support/update/announcement/2016/suse-su-20161258-1
bugzilla.suse.com/977333
ubuntu.com/security/CVE-2016-2805
This page doesn't list everything
Left out here: 188 versions. The JSON record has them.