CVE

Id
78068  
CVE No.
CVE-2015-0805  
Status
Candidate  
Description
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714041 78068 CVE-2015-0805 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-38.html  View
714042 78068 CVE-2015-0805 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1135511  View
714043 78068 CVE-2015-0805 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714044 78068 CVE-2015-0805 GENTOO:GLSA-201512-10  View
714045 78068 CVE-2015-0805 URL:https://security.gentoo.org/glsa/201512-10  View
714046 78068 CVE-2015-0805 SUSE:openSUSE-SU-2015:0677  View
714047 78068 CVE-2015-0805 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html  View
714048 78068 CVE-2015-0805 UBUNTU:USN-2550-1  View
714049 78068 CVE-2015-0805 URL:http://www.ubuntu.com/usn/USN-2550-1  View
714050 78068 CVE-2015-0805 SECTRACK:1031996  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11811 JVNDB-2015-007131 Cool Projects TarDiff における任意のコマンドを実行される脆弱性 Cool Projects TarDiff には、任意のコマンドを実行される脆弱性が存在します。 CVE-2015-0857 78068 10 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007131.html  View