NVD

Id
23256  
Name
CVE-2015-0817  
Description
The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-23  
Modified Date
2017-01-02  
Seq
2015-0817  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123376 23256 CVE-2015-0817 openSUSE-SU-2015:0567  View
123377 23256 CVE-2015-0817 SUSE-SU-2015:0593  View
123378 23256 CVE-2015-0817 SUSE-SU-2015:0630  View
123379 23256 CVE-2015-0817 openSUSE-SU-2015:0636  View
123380 23256 CVE-2015-0817 RHSA-2015:0718  View
123381 23256 CVE-2015-0817 DSA-3201  View
123382 23256 CVE-2015-0817 http://www.mozilla.org/security/announce/2015/mfsa2015-29.html  View
123383 23256 CVE-2015-0817 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
123384 23256 CVE-2015-0817 73263  View
123385 23256 CVE-2015-0817 1031958  View
123386 23256 CVE-2015-0817 USN-2538-1  View
123387 23256 CVE-2015-0817 https://bugzilla.mozilla.org/show_bug.cgi?id=1145255  View
123388 23256 CVE-2015-0817 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6587 JVNDB-2015-001907 Mozilla Firefox および SeaMonkey の asm.js の実装における意図しないメモリ領域を読み書きされる脆弱性 Mozilla Firefox および SeaMonkey の asm.js の実装は、JavaScript 実行時コンパイル (JIT) およびヒープアクセス中に境界判定 (bounds checking) が安全にスキップされる可能性があるケースかどうかを適切に判定しないため、意図しないメモリ領域を読み書きされ、その結果、任意のコードを実行される脆弱性が存在します。 CVE-2015-0817 78028 CVE-2015-0817 23256 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001907.html 2015-03-20 2015-04-08 View