CVE catalog

CVE-2016-5287

firefox-esr: CVE-2016-5287

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.35% · Oct 25, 2026

A potentially exploitable use-after-free crash during actor destruction with service workers. This issue does not affect releases earlier than Firefox 49. This vulnerability affects Firefox < 49.0.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfirefox-esrsid153.5.1esr-1not affected
Debianfirefox-esrforky153.5.1esr-1not affected
Debianfirefox-esrtrixie140.15.0esr-1~deb13u1not affected
Debianfirefox-esrtrixie-security153.5.1esr-1~deb13u1not affected
Debianfirefox-esrbookworm140.12.0esr-1~deb12u1not affected
Debianfirefox-esrbookworm-security153.5.1esr-1~deb12u1not affected
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0.1+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0445.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0446.0+build5-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0446.0.1+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0447.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0448.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0.2+build2-0ubuntu0.14.04.1fixed
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2fixed
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0.1+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0445.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0446.0+build5-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0446.0.1+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0447.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0448.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0.2+build2-0ubuntu0.14.04.1fixed
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfirefox-esrsourcesidNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourceforkyNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourcetrixieNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourcebookwormNot affectedunimportantNot reportedNot reported
Ubuntufirefoxdeb14.0449.0.2+build2-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2016-5287Not reported
Ubuntufirefoxdeb16.0449.0.2+build2-0ubuntu0.16.04.2Not reportedUBUNTU-CVE-2016-5287Not reported
Ubuntufirefoxdeb14.0449.0.2+build2-0ubuntu0.14.04.1Not reportedUSN-3111-1Not reported
Ubuntufirefoxdeb16.0449.0.2+build2-0ubuntu0.16.04.2Not reportedUSN-3111-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [firefox-esr]Unknown
    Details (4)
    • 140.12.0esr-1~deb12u1 · amd64 · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · arm64 · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

Next results

Observed:

References