CVE-2016-9079

Severity

HIGH

CVSS

7.5

EPSS

0.87598

Risk score

85.66

CISA KEV

Yes

PoC

Published

2023-06-22

Modified

2023-06-22

First seen

2026-08-07

Aliases

EUVD-2016-9900, GHSA-CMGC-V5FC-WX68

Products

Mozilla:Firefox ESR unspecified <45.5.1, Mozilla:Firefox unspecified <50.0.2, Mozilla:Firefox, Firefox ESR, and Thunderbird, Mozilla:Thunderbird unspecified <45.5.1

Sources

euvd EUVD-2016-9900
cisa.gov CVE-2016-9079

Description

Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2016-9079
https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/#CVE-2016-9079
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-9900
https://www.debian.org/security/2016/dsa-3730
http://rhn.redhat.com/errata/RHSA-2016-2843.html
https://security.gentoo.org/glsa/201701-35
http://www.securitytracker.com/id/1037370
https://www.exploit-db.com/exploits/42327/
http://rhn.redhat.com/errata/RHSA-2016-2850.html
https://www.mozilla.org/security/advisories/mfsa2016-92/
http://www.securityfocus.com/bid/94591
https://security.gentoo.org/glsa/201701-15
https://www.exploit-db.com/exploits/41151/
https://bugzilla.mozilla.org/show_bug.cgi?id=1321066