NVD

Id
24734  
Name
CVE-2015-2733  
Description
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130416 24734 CVE-2015-2733 openSUSE-SU-2015:1229  View
130417 24734 CVE-2015-2733 openSUSE-SU-2015:1266  View
130418 24734 CVE-2015-2733 SUSE-SU-2015:1268  View
130419 24734 CVE-2015-2733 SUSE-SU-2015:1269  View
130420 24734 CVE-2015-2733 SUSE-SU-2015:1449  View
130421 24734 CVE-2015-2733 RHSA-2015:1207  View
130422 24734 CVE-2015-2733 http://www.mozilla.org/security/announce/2015/mfsa2015-65.html  View
130423 24734 CVE-2015-2733 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130424 24734 CVE-2015-2733 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130425 24734 CVE-2015-2733 75541  View
130426 24734 CVE-2015-2733 1032783  View
130427 24734 CVE-2015-2733 1032784  View
130428 24734 CVE-2015-2733 USN-2656-1  View
130429 24734 CVE-2015-2733 USN-2656-2  View
130430 24734 CVE-2015-2733 https://bugzilla.mozilla.org/show_bug.cgi?id=1169867  View
130431 24734 CVE-2015-2733 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8127 JVNDB-2015-003447 Mozilla Firefox の CanonicalizeXPCOMParticipant 関数における任意のコードを実行される脆弱性 Mozilla Firefox の CanonicalizeXPCOMParticipant 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-2733 79958 CVE-2015-2733 24734 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003447.html 2015-07-02 2015-11-06 View