CVE-2016-5297 — Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)

Back Back to CVE browser

CRITICAL

Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)

Published Jun 11, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 3.60%

Description

An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <50
Vendor Mozilla Product Firefox ESR Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <45.5
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <45.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<50

Mozilla

Firefox ESR

n/a

Version	Status	Constraints
unspecified	affected	<45.5

Mozilla

Thunderbird

n/a

Version	Status	Constraints
unspecified	affected	<45.5

Red Hat Enterprise Linux 5

firefox-0:45.5.0-1.el5_11

Fixed · RHSA-2016:2780
Red Hat Enterprise Linux 6

firefox-0:45.5.0-1.el6_8

Fixed · RHSA-2016:2780
Red Hat Enterprise Linux 7

firefox-0:45.5.0-1.el7_3

Fixed · RHSA-2016:2780
Red Hat Enterprise Linux 5

thunderbird

Not affected
Red Hat Enterprise Linux 6

thunderbird

Not affected
Red Hat Enterprise Linux 7

thunderbird

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	firefox-0:45.5.0-1.el5_11	Fixed	RHSA-2016:2780
Red Hat Enterprise Linux 6	firefox-0:45.5.0-1.el6_8	Fixed	RHSA-2016:2780
Red Hat Enterprise Linux 7	firefox-0:45.5.0-1.el7_3	Fixed	RHSA-2016:2780
Red Hat Enterprise Linux 5	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 6	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 7	thunderbird	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

3.60% 0.03603

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03603

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.60% (0.03603)	89.10th	v5 (v2026.06.15)
Jun 15, 2026	3.15% (0.03145)	86.21th	v5 (v2026.06.15)
Mar 30, 2025	1.99% (0.01988)	81.99th	v4 (v2025.03.14)
Mar 29, 2025	5.00% (0.05005)	82.49th	v4 (v2025.03.14)
Mar 17, 2025	1.69% (0.01691)	80.99th	v4 (v2025.03.14)
Dec 12, 2024	0.49% (0.00489)	76.88th	v3 (v2023.03.01)
Feb 8, 2024	0.48% (0.00482)	75.20th	v3 (v2023.03.01)
Dec 12, 2023	0.48% (0.00482)	73.19th	v3 (v2023.03.01)
Nov 2, 2023	0.74% (0.00737)	78.75th	v3 (v2023.03.01)
Jun 5, 2023	0.67% (0.00672)	76.88th	v3 (v2023.03.01)
Mar 7, 2023	0.52% (0.00516)	73.11th	v3 (v2023.03.01)
Mar 6, 2023	1.54% (0.01537)	74.52th	v2 (v2022.01.01)
Feb 23, 2023	1.54% (0.01537)	74.48th	v2 (v2022.01.01)
Apr 1, 2022	1.54% (0.01537)	72.41th	v2 (v2022.01.01)
Feb 4, 2022	1.54% (0.01537)	51.33th	v2 (v2022.01.01)

Weaknesses (1)

CWE-190

Integer Overflow

References (14)

http://rhn.redhat.com/errata/RHSA-2016-2780.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.securityfocus.com/bid/94336
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037298
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2016-5297
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1303678
x_refsource_CONFIRMIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1395058
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2016-5297
https://security.gentoo.org/glsa/201701-15
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2016-5297
https://www.debian.org/security/2016/dsa-3730
vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.mozilla.org/security/advisories/mfsa2016-89/
x_refsource_CONFIRMVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-90/
x_refsource_CONFIRMVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-93/
x_refsource_CONFIRMVendor Advisory
https://www.mozilla.org/security/announce/2016/mfsa2016-89.html

Link	Providers	Tags
http://rhn.redhat.com/errata/RHSA-2016-2780.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.securityfocus.com/bid/94336		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037298		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2016-5297		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1303678		x_refsource_CONFIRMIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1395058		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2016-5297
https://security.gentoo.org/glsa/201701-15		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2016-5297
https://www.debian.org/security/2016/dsa-3730		vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.mozilla.org/security/advisories/mfsa2016-89/		x_refsource_CONFIRMVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-90/		x_refsource_CONFIRMVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2016-93/		x_refsource_CONFIRMVendor Advisory
https://www.mozilla.org/security/announce/2016/mfsa2016-89.html