cve/2016/CVE-2016-9899.md

CVE-2016-9899

Description

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=1317409
• https://www.exploit-db.com/exploits/41042/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/hwiwonl/dayone