NVD

Id
24730  
Name
CVE-2015-2728  
Description
The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2728  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130354 24730 CVE-2015-2728 openSUSE-SU-2015:1229  View
130355 24730 CVE-2015-2728 openSUSE-SU-2015:1266  View
130356 24730 CVE-2015-2728 SUSE-SU-2015:1268  View
130357 24730 CVE-2015-2728 SUSE-SU-2015:1269  View
130358 24730 CVE-2015-2728 SUSE-SU-2015:1449  View
130359 24730 CVE-2015-2728 RHSA-2015:1207  View
130360 24730 CVE-2015-2728 DSA-3300  View
130361 24730 CVE-2015-2728 http://www.mozilla.org/security/announce/2015/mfsa2015-61.html  View
130362 24730 CVE-2015-2728 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130363 24730 CVE-2015-2728 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130364 24730 CVE-2015-2728 75541  View
130365 24730 CVE-2015-2728 1032783  View
130366 24730 CVE-2015-2728 USN-2656-1  View
130367 24730 CVE-2015-2728 USN-2656-2  View
130368 24730 CVE-2015-2728 https://bugzilla.mozilla.org/show_bug.cgi?id=1142210  View
130369 24730 CVE-2015-2728 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8123 JVNDB-2015-003443 Mozilla Firefox の IndexedDB の実装の IndexedDatabaseManager クラスにおける任意のコードを実行される脆弱性 Mozilla Firefox の IndexedDB の実装の IndexedDatabaseManager クラスは、不特定の IDBDatabase フィールドを誤ってポインタとして解釈するため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-2728 79953 CVE-2015-2728 24730 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003443.html 2015-07-02 2015-11-06 View