# CVEs published 2016-03-13

47 CVEs were published on March 13, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7560](https://cve.now/CVE-2015-7560.md): The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows (no CVSS)
- [CVE-2016-0771](https://cve.now/CVE-2016-0771.md): The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is conf (no CVSS)
- [CVE-2016-1643](https://cve.now/CVE-2016-1643.md): The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome bef (no CVSS)
- [CVE-2016-1644](https://cve.now/CVE-2016-1644.md): WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout sched (no CVSS)
- [CVE-2016-1645](https://cve.now/CVE-2016-1645.md): Multiple integer signedness errors in the opj\_j2k\_update\_image\_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before (no CVSS)
- [CVE-2016-1950](https://cve.now/CVE-2016-1950.md): Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozill (no CVSS)
- [CVE-2016-1952](https://cve.now/CVE-2016-1952.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote atta (no CVSS)
- [CVE-2016-1953](https://cve.now/CVE-2016-1953.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-1954](https://cve.now/CVE-2016-1954.md): The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does (no CVSS)
- [CVE-2016-1955](https://cve.now/CVE-2016-1955.md): Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content S (no CVSS)
- [CVE-2016-1956](https://cve.now/CVE-2016-1956.md): Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consu (no CVSS)
- [CVE-2016-1957](https://cve.now/CVE-2016-1957.md): Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2016-1958](https://cve.now/CVE-2016-1958.md): browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address (no CVSS)
- [CVE-2016-1959](https://cve.now/CVE-2016-1959.md): The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2016-1960](https://cve.now/CVE-2016-1960.md): Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 (no CVSS)
- [CVE-2016-1961](https://cve.now/CVE-2016-1961.md): Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firef (no CVSS)
- [CVE-2016-1962](https://cve.now/CVE-2016-1962.md): Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x befor (no CVSS)
- [CVE-2016-1963](https://cve.now/CVE-2016-1963.md): The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) b (no CVSS)
- [CVE-2016-1964](https://cve.now/CVE-2016-1964.md): Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote (no CVSS)
- [CVE-2016-1965](https://cve.now/CVE-2016-1965.md): Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows (no CVSS)
- [CVE-2016-1966](https://cve.now/CVE-2016-1966.md): The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 3 (no CVSS)
- [CVE-2016-1967](https://cve.now/CVE-2016-1967.md): Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers t (no CVSS)
- [CVE-2016-1968](https://cve.now/CVE-2016-1968.md): Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2016-1969](https://cve.now/CVE-2016-1969.md): The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote at (no CVSS)
- [CVE-2016-1970](https://cve.now/CVE-2016-1970.md): Integer underflow in the srtp\_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote a (no CVSS)
- [CVE-2016-1971](https://cve.now/CVE-2016-1971.md): The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status (no CVSS)
- [CVE-2016-1972](https://cve.now/CVE-2016-1972.md): Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free (no CVSS)
- [CVE-2016-1973](https://cve.now/CVE-2016-1973.md): Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to (no CVSS)
- [CVE-2016-1974](https://cve.now/CVE-2016-1974.md): The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory al (no CVSS)
- [CVE-2016-1975](https://cve.now/CVE-2016-1975.md): Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows (no CVSS)
- [CVE-2016-1976](https://cve.now/CVE-2016-1976.md): Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might (no CVSS)
- [CVE-2016-1977](https://cve.now/CVE-2016-1977.md): The Machine::Code::decoder::analysis::set\_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38 (no CVSS)
- [CVE-2016-1978](https://cve.now/CVE-2016-1978.md): Use-after-free vulnerability in the ssl3\_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as use (no CVSS)
- [CVE-2016-1979](https://cve.now/CVE-2016-1979.md): Use-after-free vulnerability in the PK11\_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21 (no CVSS)
- [CVE-2016-2790](https://cve.now/CVE-2016-2790.md): The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before (no CVSS)
- [CVE-2016-2791](https://cve.now/CVE-2016-2791.md): The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38. (no CVSS)
- [CVE-2016-2792](https://cve.now/CVE-2016-2792.md): The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x be (no CVSS)
- [CVE-2016-2793](https://cve.now/CVE-2016-2793.md): CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers (no CVSS)
- [CVE-2016-2794](https://cve.now/CVE-2016-2794.md): The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox (no CVSS)
- [CVE-2016-2795](https://cve.now/CVE-2016-2795.md): The graphite2::FileFace::get\_table\_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x befor (no CVSS)
- [CVE-2016-2796](https://cve.now/CVE-2016-2796.md): Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before (no CVSS)
- [CVE-2016-2797](https://cve.now/CVE-2016-2797.md): The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38. (no CVSS)
- [CVE-2016-2798](https://cve.now/CVE-2016-2798.md): The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x b (no CVSS)
- [CVE-2016-2799](https://cve.now/CVE-2016-2799.md): Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and F (no CVSS)
- [CVE-2016-2800](https://cve.now/CVE-2016-2800.md): The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x be (no CVSS)
- [CVE-2016-2801](https://cve.now/CVE-2016-2801.md): The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and (no CVSS)
- [CVE-2016-2802](https://cve.now/CVE-2016-2802.md): The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox E (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.