Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-7yr6-9vzv-g3h3
Summary
An anonymous security researcher working with Trend Micro's Zero Day Initiative
reported a buffer overflow in the ClearKey Content Decryption Module (CDM) used by the
Encrypted Media Extensions (EME) API. This vulnerability can be triggered using a
malformed video file due to incorrect error handling. This could allow arbitrary code
execution if combined with a second vulnerability that allows an escape from the Gecko
Media Plugin (GMP) sandbox. Without such a vulnerability, the buffer overflow is contained
within the GMP sandbox and cannot be exploited.
Aliases
0
alias CVE-2016-2837
Fixed_packages
0
url pkg:mozilla/Firefox@48.0.0
purl pkg:mozilla/Firefox@48.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@48.0.0
1
url pkg:mozilla/Firefox%20ESR@45.3.0
purl pkg:mozilla/Firefox%20ESR@45.3.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@45.3.0
Affected_packages
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2837
reference_id CVE-2016-2837
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2837
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2016-77
reference_id mfsa2016-77
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2016-77
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-7yr6-9vzv-g3h3