CVE-2015-7204

EPSS 1.72%
Published 16.12.2015 11:59:03
Last modified 12.04.2025 10:46:40
Source security@mozilla.org
Teams watchlist Login
Open Login

Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.

Affected products Warnungen 0 Metrics 2 CWE 0 References 14

Data is provided by the National Vulnerability Database (NVD)

Opensuse ≫ Leap Version42.1

Opensuse ≫ Opensuse Version13.1

Opensuse ≫ Opensuse Version13.2

Fedoraproject ≫ Fedora Version22

Fedoraproject ≫ Fedora Version23

Mozilla ≫ Firefox Version <= 42.0

Mozilla ≫ Firefox Version41.0

Mozilla ≫ Firefox Version41.0.1

Mozilla ≫ Firefox Version41.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.72%	0.816

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

https://security.gentoo.org/glsa/201512-10

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html

http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html

http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html

http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html

http://www.securitytracker.com/id/1034426

http://www.ubuntu.com/usn/USN-2833-1

http://www.securityfocus.com/bid/79280

http://www.mozilla.org/security/announce/2015/mfsa2015-135.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1216130

https://nvd.nist.gov/vuln/detail/CVE-2015-7204

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-7204

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-7204

EUVD