{"id":"CVE-2016-2805","aliases":["DLA-472-1","DSA-3559-1","DSA-3576-1","EUVD-2016-3878","GHSA-683q-h46v-73wp","MGASA-2016-0158","MGASA-2016-0254","RHSA-2016:0695","RHSA-2016:1041","SUSE-SU-2016:1258-1","SUSE-SU-2016:1342-1","SUSE-SU-2016:1374-1","UBUNTU-CVE-2016-2805","USN-2973-1"],"status":"published","title":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...","description":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04651,"percentile":0.91793,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-04-27T00:00:00Z","modified":"2026-06-26T10:30:45Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:38.8.0+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:38.8.0+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0-1~deb7u1"}]}],"versions":["10.0.12-1","11.0-1","16.0.2-1","17.0-1","17.0.10-1","17.0.10-1+powerpcspe1","17.0.10-1+powerpcspe2","17.0.10-1~deb7u1","17.0.2-1","17.0.4-1","17.0.5-1","17.0.5-2","17.0.7-1","17.0.7-1~deb7u1","17.0.8-1","17.0.8-1~deb7u1","17.0.9-1","17.0.9-1~deb7u1","17.0.9-2","24.0-1","24.0~b3-2","24.1.1-1","24.2.0-1","24.2.0-1+alpha","24.2.0-1+powerpcspe1","24.3.0-1","24.3.0-2","24.4.0-1","24.4.0-1~deb7u1","24.5.0-1","24.5.0-1~deb7u1","24.5.0-2","24.6.0-1~deb7u1","24.7.0-1~deb7u1","24.8.0-1~deb7u1","24.8.1-1~deb7u1","30.0~b1-1","31.0-1","31.0-2","31.0-3","31.0~b1-2","31.0~b2-1","31.1.2-1","31.2.0-1","31.2.0-1~deb7u1","31.3.0-1","31.3.0-1+powerpcspe1","31.3.0-1~deb7u1","31.4.0-1","31.4.0-1~deb7u1","31.4.0-2","31.5.0-1","31.5.0-1~deb7u1","31.6.0-1","31.6.0-1~deb7u1","31.7.0-1","31.7.0-1~deb7u1","31.7.0-1~deb8u1","31.8.0-1~deb7u1","31.8.0-1~deb8u1","31.8.0-1~deb8u1+kbsd11","32.0~b1-1","33.0~b1-1","34.0~b1-1","34.0~b1-2","36.0~b1-1","36.0~b1-2","38.0.1-1","38.0~b2-1","38.0~b5-1","38.1.0-1","38.2.0-1","38.2.0-1~stretch","38.2.0-2","38.3.0-1","38.3.0-1~deb7u1","38.3.0-1~deb8u1","38.3.0-2","38.4.0-1","38.4.0-1~deb7u1","38.4.0-1~deb8u1","38.5.0-1","38.5.0-1~deb7u1","38.5.0-1~deb8u1","38.6.0-1","38.6.0-1~deb7u1","38.6.0-1~deb8u1","38.7.0-1","38.7.0-1~deb7u1","38.7.0-1~deb8u1","38.7.0-1~deb8u2","38.7.0-1~deb8u3","38.7.2-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-1~deb8u1"}]}],"versions":["31.6.0esr-1","31.7.0esr-1~deb7u1","31.7.0esr-1~deb8u1","31.8.0esr-1~deb7u1","31.8.0esr-1~deb8u1","32.0-1","32.0.3-1","32.0~b1-1","32.0~b3-1","32.0~b5-1","33.0-1","33.0-2","33.1-1","34.0-1","35.0-1","35.0.1-1","36.0-1","36.0-2","36.0.1-1","36.0.1-2","36.0.4-1","37.0-1","37.0.1-1","37.0.2-1","38.0-1","38.0-2","38.0.1-1","38.0.1-2","38.0.1-3","38.0.1-4","38.0.1-5","38.1.0esr-1","38.1.0esr-2","38.1.0esr-3","38.1.1esr-1","38.1.1esr-1~deb9u1","38.2.0esr-1","38.2.0esr-1~deb7u1","38.2.0esr-1~deb8u1","38.2.0esr-1~stretch","38.2.1esr-1","38.2.1esr-1~deb7u1","38.2.1esr-1~deb8u1","38.3.0esr-1","38.3.0esr-1~deb7u1","38.3.0esr-1~deb8u1","38.4.0esr-1","38.4.0esr-1~deb7u1","38.4.0esr-1~deb8u1","38.5.0esr-1","38.5.0esr-1~deb7u2","38.5.0esr-1~deb8u1","38.5.0esr-1~deb8u2","38.6.0esr-1~deb7u1","38.6.0esr-1~deb8u1","38.6.1esr-1~deb7u1","38.6.1esr-1~deb8u1","38.7.0esr-1~deb7u1","38.7.0esr-1~deb8u1","38.7.1esr-1~deb7u1","38.7.1esr-1~deb8u1","38.8.0esr-1~deb7u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:7","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-1~deb7u1"}]}],"versions":["10.0.12esr-1","10.0.12esr-1+alpha","10.0.12esr-1+nmu1","10.0.12esr-1+nmu1+alpha","11.0-1","11.0-2","11.0-3","11.0-4","11.0~b1-1","11.0~b1-2","11.0~b2-1","11.0~b3-1","11.0~b4-1","11.0~b5-1","11.0~b6-1","12.0-1","12.0-2","12.0-3","12.0-4","12.0-5","12.0-6","12.0-7","13.0-1","13.0.1-1","13.0.1-2","14.0.1-1","14.0.1-2","15.0-1","15.0.1-1","16.0-1","16.0.1-1","16.0.2-1","17.0-1","17.0.1-1","17.0.1-2","17.0.10esr-1~deb7u1","17.0.5esr-1","17.0.6esr-1","17.0.6esr-1~deb7u1","17.0.7esr-1","17.0.7esr-1~deb7u1","17.0.7esr-2","17.0.8esr-1","17.0.8esr-1~deb7u1","17.0.8esr-2","17.0.8esr-2~deb7u1","17.0.9esr-1~deb7u1","18.0-1","18.0.1-1","18.0.2-1","19.0-1","19.0.2-1","20.0-1","21.0-1","22.0-1","23.0-1","23.0-2","23.0.1-1","24.0-1","24.0-2","24.0~b4-1","24.0~b7-1","24.0~b9-1","24.1.0esr-1","24.1.0esr-1+powerpcspe1","24.2.0esr-1","24.2.0esr-1+alpha","24.2.0esr-1+powerpcspe1","24.3.0esr-1","24.3.0esr-1+alpha","24.3.0esr-1~deb7u1","24.4.0esr-1","24.4.0esr-1~deb7u2","24.5.0esr-1","24.5.0esr-1~deb7u1","24.6.0esr-1~deb7u1","24.7.0esr-1~deb7u1","24.8.0esr-1~deb7u1","24.8.1esr-1~deb7u1","25.0-1","25.0~b3-1","25.0~b9-1","26.0-1","27.0-1","27.0-2","27.0.1-1","28.0-1","29.0-1","29.0-2","29.0.1-1","29.0.1-1+alpha","29.0.1-2","30.0-1","30.0-2","30.0~b3-1","30.0~b5-1","30.0~b5-2","30.0~b5-3","30.0~b7-1","31.0-1","31.0-2","31.0-3","31.0~b1-1","31.0~b3-1","31.1.0esr-1","31.2.0esr-1","31.2.0esr-1~deb7u1","31.2.0esr-2","31.2.0esr-2+hurd.0","31.2.0esr-2~deb7u1","31.2.0esr-3","31.2.0esr-3~deb7u1","31.3.0esr-1","31.3.0esr-1+powerpcspe1","31.3.0esr-1~deb7u1","31.4.0esr-1","31.4.0esr-1~deb7u1","31.5.0esr-1","31.5.0esr-1~deb7u1","31.5.3esr-1","31.5.3esr-1~deb7u1","31.6.0esr-1","31.6.0esr-1~deb7u1","31.7.0esr-1~deb7u1","31.7.0esr-1~deb8u1","31.8.0esr-1~deb7u1","31.8.0esr-1~deb8u1","32.0-1","32.0.3-1","32.0~b1-1","32.0~b3-1","32.0~b5-1","33.0-1","33.0-2","33.1-1","34.0-1","35.0-1","35.0.1-1","36.0-1","36.0-2","36.0.1-1","36.0.1-2","36.0.4-1","37.0-1","37.0.1-1","37.0.2-1","38.0-1","38.0-2","38.0.1-1","38.0.1-2","38.0.1-3","38.0.1-4","38.0.1-5","38.1.0esr-1","38.1.0esr-2","38.1.0esr-3","38.1.1esr-1","38.1.1esr-1~deb9u1","38.2.0esr-1","38.2.0esr-1~deb7u1","38.2.0esr-1~deb8u1","38.2.0esr-1~stretch","38.2.1esr-1","38.2.1esr-1~deb7u1","38.2.1esr-1~deb8u1","38.3.0esr-1","38.3.0esr-1~deb7u1","38.3.0esr-1~deb8u1","38.4.0esr-1","38.4.0esr-1~deb7u1","38.4.0esr-1~deb8u1","38.5.0esr-1","38.5.0esr-1~deb7u2","38.5.0esr-1~deb8u1","38.5.0esr-1~deb8u2","38.6.0esr-1~deb7u1","38.6.0esr-1~deb8u1","38.6.1esr-1~deb7u1","38.6.1esr-1~deb8u1","38.7.0esr-1~deb7u1","38.7.0esr-1~deb8u1","38.7.1esr-1~deb7u1","38.7.1esr-1~deb8u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0-1~deb8u1"}]}],"versions":["31.6.0-1","31.7.0-1","31.7.0-1~deb7u1","31.7.0-1~deb8u1","31.8.0-1~deb7u1","31.8.0-1~deb8u1","31.8.0-1~deb8u1+kbsd11","32.0~b1-1","33.0~b1-1","34.0~b1-1","34.0~b1-2","36.0~b1-1","36.0~b1-2","38.0.1-1","38.0~b2-1","38.0~b5-1","38.1.0-1","38.2.0-1","38.2.0-1~stretch","38.2.0-2","38.3.0-1","38.3.0-1~deb7u1","38.3.0-1~deb8u1","38.3.0-2","38.4.0-1","38.4.0-1~deb7u1","38.4.0-1~deb8u1","38.5.0-1","38.5.0-1~deb7u1","38.5.0-1~deb8u1","38.6.0-1","38.6.0-1~deb7u1","38.6.0-1~deb8u1","38.7.0-1","38.7.0-1~deb7u1","38.7.0-1~deb8u1","38.7.0-1~deb8u2","38.7.0-1~deb8u3","38.7.2-1","38.8.0-1~deb7u1","38.8.0-1~deb7u1.1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0-1.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0-1.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.2.0-1.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.2.0-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el5_11"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el6_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el7_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el7_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el7_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el7_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el7_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:45.1.0-1.el7_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el5_11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el5_11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el5_11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_productivity:5","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el5_11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-2.el6_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-2.el6_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-2.el6_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-2.el6_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-2.el6_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-2.el6_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.8.0-1.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-66.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.8.0esr-40.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.2-30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:38.8.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:38.8.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:38.8.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:38.8.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1"],"bundled":5}],"products":[{"vendor":"mozilla","product":"firefox"}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3576","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-39.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0695.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securitytracker.com/id/1035692","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2973-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201701-15","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1241731","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3559","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1041.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2805","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-683q-h46v-73wp"},{"url":"https://advisories.mageia.org/MGASA-2016-0158.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18278","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-39/","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-44/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-47/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-0695.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0254.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18616","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-49/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/thunderbird/45.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/thunderbird/45.1.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/thunderbird/45.1.1/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/thunderbird/45.2.0/releasenotes/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-1041.html","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-1392.html","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0695","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr45.1","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330286","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0695.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1526","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0061/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2805","tags":["advisory","report"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-39.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2807","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2808","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-47.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2814","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2814","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2814","tags":["advisory"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-44.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1041","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.8","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1041.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161258-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/977333","tags":["report"]},{"url":"https://bugzilla.suse.com/977374","tags":["report"]},{"url":"https://bugzilla.suse.com/977376","tags":["report"]},{"url":"https://bugzilla.suse.com/977381","tags":["report"]},{"url":"https://bugzilla.suse.com/977386","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2814","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161342-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161374-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-2805","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2973-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-1938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2807","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-2805","description":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.","status":"published","published":"2016-04-30T17:00:00Z","modified":"2024-08-05T23:32:21.196Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3878","description":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.","status":"published","published":"2016-04-30T17:00:00Z","modified":"2024-08-05T23:32:21Z","updated_at":"2026-11-03T02:22:52.199729Z"}],"ghsa":[{"id":"GHSA-683q-h46v-73wp","title":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...","description":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.","status":"published","published":"2022-05-17T02:37:51Z","modified":"2023-01-27T05:05:33Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:42:42.951341Z"}],"nvd":[{"id":"CVE-2016-2805","description":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.","status":"published","published":"2016-04-30T17:59:01.193Z","modified":"2026-06-17T00:44:29.353Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:23.795791Z"}],"osv":[{"id":"UBUNTU-CVE-2016-2805","description":"Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.","status":"published","published":"2016-04-30T00:00:00Z","modified":"2026-04-22T10:38:27.385915Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"DLA-472-1","title":"icedove - security update","status":"published","published":"2016-05-14T00:00:00Z","modified":"2026-03-09T02:11:45.459469Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3559-1","title":"iceweasel - security update","status":"published","published":"2016-04-27T00:00:00Z","modified":"2026-03-09T01:22:21.413713Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3576-1","title":"icedove - security update","status":"published","published":"2016-05-13T00:00:00Z","modified":"2026-03-09T01:23:32.943025Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0158","title":"Updated firefox packages fix security vulnerabilities","description":"Updated firefox packages fix security vulnerabilities:\n\nMultiple flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or, potentially,\nexecute arbitrary code with the privileges of the user running Firefox\n(CVE-2016-2805, CVE-2016-2806, CVE-2016-2807, CVE-2016-2808, CVE-2016-2814).\n","status":"published","published":"2016-04-29T17:21:35Z","modified":"2026-04-16T06:26:18.404977807Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0254","title":"Updated thunderbird packages fix security vulnerability","description":"Multiple flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Thunderbird to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Thunderbird (CVE-2016-2805, CVE-2016-2807, CVE-2016-2818).\n\nThis update provides the next stable branch of Thunderbird, version 45.2.0.\n","status":"published","published":"2016-07-14T20:33:59Z","modified":"2026-04-16T06:22:21.168646169Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"RHSA-2016:0695","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T23:12:16Z","modified":"2026-06-26T10:30:31Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1041","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-15T23:12:27Z","modified":"2026-06-26T10:30:45Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"SUSE-SU-2016:1258-1","title":"Security update for MozillaFirefox","description":"This update to MozillaFirefox 38.8.0 ESR fixes the following issues (bsc#977333):\n\n- CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977374)\n- CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977376)\n- CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (bsc#977381)\n- CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (bsc#977386)\n","status":"published","published":"2016-05-06T14:49:27Z","modified":"2026-02-04T02:19:12.825296Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:1342-1","title":"Security update for MozillaFirefox","description":"This update to MozillaFirefox 38.8.0 ESR fixes the following security issues (bsc#977333):\n\n- CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977374)\n- CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977376)\n- CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (bsc#977386)\n- CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (bsc#977381)\n","status":"published","published":"2016-05-18T12:34:08Z","modified":"2026-02-04T04:22:13.502943Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:1374-1","title":"Security update for MozillaFirefox","description":"This update to MozillaFirefox 38.8.0 ESR fixes the following security issues (bsc#977333):\n\n- CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977374)\n- CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (bsc#977376)\n- CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (bsc#977386)\n- CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (bsc#977381)\n","status":"published","published":"2016-05-20T13:33:44Z","modified":"2026-02-04T03:33:19.144954Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-2973-1","title":"thunderbird vulnerabilities","description":"Christian Holler, Tyson Smith, and Phil Ringalda discovered multiple\nmemory safety issues in Thunderbird. If a user were tricked in to opening\na specially crafted message, an attacker could potentially exploit these\nto cause a denial of service via application crash, or execute arbitrary\ncode. (CVE-2016-2805, CVE-2016-2807)\n\nHanno Böck discovered that calculations with mp_div and mp_exptmod in NSS\nproduce incorrect results in some circumstances, resulting in\ncryptographic weaknesses. (CVE-2016-1938)\n\nA use-after-free was discovered in ssl3_HandleECDHServerKeyExchange in\nNSS. A remote attacker could potentially exploit this to cause a denial of\nservice via application crash, or execute arbitrary code. (CVE-2016-1978)\n\nA use-after-free was discovered in PK11_ImportDERPrivateKeyInfoAndReturnKey\nin NSS. A remote attacker could potentially exploit this to cause a denial\nof service via application crash, or execute arbitrary code.\n(CVE-2016-1979)\n","status":"published","published":"2016-05-19T00:25:53Z","modified":"2026-04-22T09:23:46.517883Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}