NVD

Id
23270  
Name
CVE-2015-0831  
Description
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-25  
Modified Date
2016-12-23  
Seq
2015-0831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123536 23270 CVE-2015-0831 openSUSE-SU-2015:0404  View
123537 23270 CVE-2015-0831 SUSE-SU-2015:0412  View
123538 23270 CVE-2015-0831 SUSE-SU-2015:0446  View
123539 23270 CVE-2015-0831 SUSE-SU-2015:0447  View
123540 23270 CVE-2015-0831 openSUSE-SU-2015:0448  View
123541 23270 CVE-2015-0831 openSUSE-SU-2015:0567  View
123542 23270 CVE-2015-0831 openSUSE-SU-2015:1266  View
123543 23270 CVE-2015-0831 openSUSE-SU-2015:0570  View
123544 23270 CVE-2015-0831 RHSA-2015:0265  View
123545 23270 CVE-2015-0831 RHSA-2015:0266  View
123546 23270 CVE-2015-0831 RHSA-2015:0642  View
123547 23270 CVE-2015-0831 DSA-3174  View
123548 23270 CVE-2015-0831 DSA-3179  View
123549 23270 CVE-2015-0831 http://www.mozilla.org/security/announce/2015/mfsa2015-16.html  View
123550 23270 CVE-2015-0831 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
123551 23270 CVE-2015-0831 72746  View
123552 23270 CVE-2015-0831 1031791  View
123553 23270 CVE-2015-0831 1031792  View
123554 23270 CVE-2015-0831 USN-2505-1  View
123555 23270 CVE-2015-0831 USN-2506-1  View
123556 23270 CVE-2015-0831 https://bugzilla.mozilla.org/show_bug.cgi?id=1130541  View
123557 23270 CVE-2015-0831 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6289 JVNDB-2015-001609 Mozilla Firefox および Thunderbird の mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex 関数における任意のコードを実行される脆弱性 Mozilla Firefox および Thunderbird の mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-0831 78042 CVE-2015-0831 23270 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001609.html 2015-02-24 2015-03-19 View