CVE

Id
78091  
CVE No.
CVE-2015-0828  
Status
Candidate  
Description
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714463 78091 CVE-2015-0828 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-18.html  View
714464 78091 CVE-2015-0828 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1030667  View
714465 78091 CVE-2015-0828 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=988675  View
714466 78091 CVE-2015-0828 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714467 78091 CVE-2015-0828 GENTOO:GLSA-201504-01  View
714468 78091 CVE-2015-0828 URL:https://security.gentoo.org/glsa/201504-01  View
714469 78091 CVE-2015-0828 SUSE:openSUSE-SU-2015:0404  View
714470 78091 CVE-2015-0828 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html  View
714471 78091 CVE-2015-0828 SUSE:openSUSE-SU-2015:0570  View
714472 78091 CVE-2015-0828 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html  View
714473 78091 CVE-2015-0828 BID:72744  View
714474 78091 CVE-2015-0828 URL:http://www.securityfocus.com/bid/72744  View
714475 78091 CVE-2015-0828 SECTRACK:1031791  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5516 JVNDB-2015-000022 AL-Mail32 におけるバッファオーバーフローの脆弱性 有限会社クレアルが提供する AL-Mail32 は、Windows 上で稼動する電子メールクライアントです。AL-Mail32 には、添付ファイルの処理に問題があり、バッファオーバーフローの脆弱性が存在します。 CVE-2015-0880 78091 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000022.html  View