CVE

Id
80010  
CVE No.
CVE-2015-2733  
Status
Candidate  
Description
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.  
Phase
Assigned (20150325)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
724600 80010 CVE-2015-2733 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-65.html  View
724601 80010 CVE-2015-2733 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1169867  View
724602 80010 CVE-2015-2733 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
724603 80010 CVE-2015-2733 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
724604 80010 CVE-2015-2733 GENTOO:GLSA-201512-10  View
724605 80010 CVE-2015-2733 URL:https://security.gentoo.org/glsa/201512-10  View
724606 80010 CVE-2015-2733 REDHAT:RHSA-2015:1207  View
724607 80010 CVE-2015-2733 URL:http://rhn.redhat.com/errata/RHSA-2015-1207.html  View
724608 80010 CVE-2015-2733 SUSE:SUSE-SU-2015:1268  View
724609 80010 CVE-2015-2733 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html  View
724610 80010 CVE-2015-2733 SUSE:SUSE-SU-2015:1269  View
724611 80010 CVE-2015-2733 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html  View
724612 80010 CVE-2015-2733 SUSE:SUSE-SU-2015:1449  View
724613 80010 CVE-2015-2733 URL:http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html  View
724614 80010 CVE-2015-2733 SUSE:openSUSE-SU-2015:1266  View
724615 80010 CVE-2015-2733 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
724616 80010 CVE-2015-2733 SUSE:openSUSE-SU-2015:1229  View
724617 80010 CVE-2015-2733 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html  View
724618 80010 CVE-2015-2733 UBUNTU:USN-2656-1  View
724619 80010 CVE-2015-2733 URL:http://www.ubuntu.com/usn/USN-2656-1  View
724620 80010 CVE-2015-2733 UBUNTU:USN-2656-2  View
724621 80010 CVE-2015-2733 URL:http://www.ubuntu.com/usn/USN-2656-2  View
724622 80010 CVE-2015-2733 BID:75541  View
724623 80010 CVE-2015-2733 URL:http://www.securityfocus.com/bid/75541  View
724624 80010 CVE-2015-2733 SECTRACK:1032783  View
724625 80010 CVE-2015-2733 URL:http://www.securitytracker.com/id/1032783  View
724626 80010 CVE-2015-2733 SECTRACK:1032784  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6677 JVNDB-2015-001997 Byzanz の GIF エンコーダ におけるサービス運用妨害 (DoS) の脆弱性 Byzanz の GIF エンコーダ には、サービス運用妨害 (out-of-bounds heap write およびクラッシュ) 状態にされる、または任意のコマンドを実行される脆弱性が存在します。 CVE-2015-2785 80010 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001997.html  View