CVE-2016-2839

CVE-2016-2839 describes a denial-of-service vulnerability affecting Mozilla Firefox versions prior to 48.0 and Firefox ESR 45.x prior to 45.3 on Linux. This flaw arises from improper interaction between Firefox's cairo library calls and libav header allocation in FFmpeg 0.10, allowing remote attackers to crash the application via a specially crafted video. Rated with a CVSS score of 6.5 (Medium), this vulnerability has a network-based attack vector requiring user interaction (UI:R). A successful exploit would lead to high availability impact (A:H), resulting in an application crash, but does not compromise confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating low public attention.