CVE-2016-9893

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 50.1
Mozilla	Firefox ESR	>= unspecified, < 45.6
Mozilla	Thunderbird	>= unspecified, < 45.6

References

http://rhn.redhat.com/errata/RHSA-2016-2946.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2973.htmlThird Party Advisory
http://www.securityfocus.com/bid/94885Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037461Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1319524%2C1298773%2C1299098%2C1309834%2C1312609%2C1313212%2C1317805%2C1312548%2C1315631%2C1287912Issue Tracking, Vendor Advisory
https://security.gentoo.org/glsa/201701-15Third Party Advisory
https://www.debian.org/security/2017/dsa-3757Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2016-94/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-95/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-96/Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-2946.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2973.htmlThird Party Advisory
http://www.securityfocus.com/bid/94885Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037461Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1319524%2C1298773%2C1299098%2C1309834%2C1312609%2C1313212%2C1317805%2C1312548%2C1315631%2C1287912Issue Tracking, Vendor Advisory
https://security.gentoo.org/glsa/201701-15Third Party Advisory
https://www.debian.org/security/2017/dsa-3757Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2016-94/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-95/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-96/Vendor Advisory

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-98947.5A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a CVE-2016-98956.1Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vu CVE-2016-98968.1Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability a CVE-2016-98977.5Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within CVE-2016-98989.8Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox <CVE-2016-98999.8Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability CVE-2016-99007.5External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This c CVE-2016-99019.8HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:CVE-2016-99027.5The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. T CVE-2016-99036.1Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this reso CVE-2016-99047.5An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contex CVE-2016-99058.8A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR <