NVD

Id
24715  
Name
CVE-2015-2712  
Description
The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-05-14  
Modified Date
2017-01-02  
Seq
2015-2712  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130164 24715 CVE-2015-2712 openSUSE-SU-2015:0934  View
130165 24715 CVE-2015-2712 http://www.mozilla.org/security/announce/2015/mfsa2015-50.html  View
130166 24715 CVE-2015-2712 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130167 24715 CVE-2015-2712 74611  View
130168 24715 CVE-2015-2712 USN-2602-1  View
130169 24715 CVE-2015-2712 https://bugzilla.mozilla.org/show_bug.cgi?id=1152280  View
130170 24715 CVE-2015-2712 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7340 JVNDB-2015-002660 Mozilla Firefox の asm.js 実装における out-of-bounds write を誘発される脆弱性 Mozilla Firefox の asm.js 実装は、境界チェックがスキップされた可能性のあるケースの特定において、ヒープサイズを適切に確定しないため、out-of-bounds write を誘発され、任意のコードを実行される、または、out-of-bounds read を誘発され、プロセスメモリから重要な情報を取得される脆弱性が存在します。 CVE-2015-2712 79937 CVE-2015-2712 24715 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002660.html 2015-05-12 2015-05-15 View