6.8
CVE-2015-0831
- EPSS 4.16%
- Veröffentlicht 25.02.2015 11:59:11
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle security@mozilla.org
- CVE-Watchlists
- Unerledigt
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird Version <= 31.4
Mozilla ≫ Thunderbird Version31.0
Mozilla ≫ Thunderbird Version31.1.2
Mozilla ≫ Thunderbird Version31.2
Mozilla ≫ Thunderbird Version31.3
Mozilla ≫ Firefox ESR Version31.1
Mozilla ≫ Firefox ESR Version31.2
Mozilla ≫ Firefox ESR Version31.3
Mozilla ≫ Firefox ESR Version31.4
Mozilla ≫ Firefox ESR Version31.5
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Redhat ≫ Enterprise Linux Version5
Redhat ≫ Enterprise Linux Version6.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.16% | 0.896 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
http://www.securitytracker.com/id/1031791
http://www.ubuntu.com/usn/USN-2505-1
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
http://rhn.redhat.com/errata/RHSA-2015-0265.html
http://rhn.redhat.com/errata/RHSA-2015-0266.html
http://rhn.redhat.com/errata/RHSA-2015-0642.html
http://www.debian.org/security/2015/dsa-3174
http://www.debian.org/security/2015/dsa-3179
http://www.securitytracker.com/id/1031792
http://www.ubuntu.com/usn/USN-2506-1
http://www.mozilla.org/security/announce/2015/mfsa2015-16.html
http://www.securityfocus.com/bid/72746
https://bugzilla.mozilla.org/show_bug.cgi?id=1130541