7.5

CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Solaris Version11.3
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version15.04
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Mozilla ≫ Firefox Version <= 39.0.3
Mozilla ≫ Firefox Version38.0
Mozilla ≫ Firefox Version38.0.1
Mozilla ≫ Firefox Version38.0.5
Mozilla ≫ Firefox Version38.1.0
Mozilla ≫ Firefox Os Version2.1.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.67% 0.853
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P