NVD

Id
24733  
Name
CVE-2015-2731  
Description
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2731  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130402 24733 CVE-2015-2731 openSUSE-SU-2015:1229  View
130403 24733 CVE-2015-2731 RHSA-2015:1207  View
130404 24733 CVE-2015-2731 RHSA-2015:1455  View
130405 24733 CVE-2015-2731 DSA-3300  View
130406 24733 CVE-2015-2731 http://www.mozilla.org/security/announce/2015/mfsa2015-63.html  View
130407 24733 CVE-2015-2731 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130408 24733 CVE-2015-2731 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130409 24733 CVE-2015-2731 75541  View
130410 24733 CVE-2015-2731 1032783  View
130411 24733 CVE-2015-2731 1032784  View
130412 24733 CVE-2015-2731 USN-2656-1  View
130413 24733 CVE-2015-2731 USN-2656-2  View
130414 24733 CVE-2015-2731 https://bugzilla.mozilla.org/show_bug.cgi?id=1149891  View
130415 24733 CVE-2015-2731 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8126 JVNDB-2015-003446 Mozilla Firefox および Thunderbird のマイクロタスク実装の CSPService::ShouldLoad 関数における任意のコードを実行される脆弱性 Mozilla Firefox および Thunderbird のマイクロタスク実装の CSPService::ShouldLoad 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-2731 79956 CVE-2015-2731 24733 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003446.html 2015-07-02 2015-10-30 View