CVE-2015-7204

EPSS 1.72%
Veröffentlicht 16.12.2015 11:59:03
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 14

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opensuse ≫ Leap Version42.1

Opensuse ≫ Opensuse Version13.1

Opensuse ≫ Opensuse Version13.2

Fedoraproject ≫ Fedora Version22

Fedoraproject ≫ Fedora Version23

Mozilla ≫ Firefox Version <= 42.0

Mozilla ≫ Firefox Version41.0

Mozilla ≫ Firefox Version41.0.1

Mozilla ≫ Firefox Version41.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.72%	0.816

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

https://security.gentoo.org/glsa/201512-10

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html

http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html

http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html

http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html

http://www.securitytracker.com/id/1034426

http://www.ubuntu.com/usn/USN-2833-1

http://www.securityfocus.com/bid/79280

http://www.mozilla.org/security/announce/2015/mfsa2015-135.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1216130

https://nvd.nist.gov/vuln/detail/CVE-2015-7204

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-7204

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-7204

EUVD