CVE-2016-9893

Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

• CWE-119

• http://rhn.redhat.com/errata/RHSA-2016-2946.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2973.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94885Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037461Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1319524%2C1298773%2C1299098%2C1309834%2C1312609%2C1313212%2C1317805%2C1312548%2C1315631%2C1287912Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201701-15Third Party Advisory
• https://www.debian.org/security/2017/dsa-3757Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-94/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-95/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-96/Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2946.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2973.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94885Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037461Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1319524%2C1298773%2C1299098%2C1309834%2C1312609%2C1313212%2C1317805%2C1312548%2C1315631%2C1287912Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201701-15Third Party Advisory
• https://www.debian.org/security/2017/dsa-3757Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-94/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-95/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2016-96/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9885An issue was discovered in Pivotal GemFire for PCF 1.6.x ver…
• CVE-2016-9886Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9888An error within the "tar_directory_for_file()" function (gsf…
• CVE-2016-9889Some forms with the parameter geo_zoomlevel_to_found_locatio…
• CVE-2016-9891Cross-site scripting (XSS) vulnerability in admin/media.php …
• CVE-2016-9892The esets_daemon service in ESET Endpoint Antivirus for macO…
• CVE-2016-9894A buffer overflow in SkiaGl caused when a GrGLBuffer is trun…
• CVE-2016-9895Event handlers on "marquee" elements were executed despite a…
• CVE-2016-9896Use-after-free while manipulating the "navigator" object wit…
• CVE-2016-9897Memory corruption resulting in a potentially exploitable cra…
• CVE-2016-9898Use-after-free resulting in potentially exploitable crash wh…
• CVE-2016-9899Use-after-free while manipulating DOM events and removing au…