CVE-2016-9066

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Mozilla	Thunderbird	>= unspecified, < 45.5
Mozilla	Firefox ESR	>= unspecified, < 45.5
Mozilla	Firefox	>= unspecified, < 50

References

http://rhn.redhat.com/errata/RHSA-2016-2780.htmlThird Party Advisory
http://www.securityfocus.com/bid/94336Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037298Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1299686Issue Tracking, Vendor Advisory
https://security.gentoo.org/glsa/201701-15Third Party Advisory
https://www.debian.org/security/2016/dsa-3730Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2016-89/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-90/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-93/Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-2780.htmlThird Party Advisory
http://www.securityfocus.com/bid/94336Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037298Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1299686Issue Tracking, Vendor Advisory
https://security.gentoo.org/glsa/201701-15Third Party Advisory
https://www.debian.org/security/2016/dsa-3730Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2016-89/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-90/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-93/Vendor Advisory

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-90676.5Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50.CVE-2016-90687.5A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash. This vulnerability affects CVE-2016-90697.8A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability af CVE-2016-90708.0A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScrip CVE-2016-90715.3Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a u CVE-2016-90727.5When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note:CVE-2016-90737.5WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects CVE-2016-90745.9An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Ser CVE-2016-90759.8An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions l CVE-2016-90765.9An issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack re CVE-2016-90777.0Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is variable depending on CVE-2016-90788.8Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can