NVD

Id
24735  
Name
CVE-2015-2734  
Description
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2734  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130432 24735 CVE-2015-2734 openSUSE-SU-2015:1229  View
130433 24735 CVE-2015-2734 openSUSE-SU-2015:1266  View
130434 24735 CVE-2015-2734 SUSE-SU-2015:1268  View
130435 24735 CVE-2015-2734 SUSE-SU-2015:1269  View
130436 24735 CVE-2015-2734 SUSE-SU-2015:1449  View
130437 24735 CVE-2015-2734 RHSA-2015:1207  View
130438 24735 CVE-2015-2734 RHSA-2015:1455  View
130439 24735 CVE-2015-2734 DSA-3300  View
130440 24735 CVE-2015-2734 DSA-3324  View
130441 24735 CVE-2015-2734 http://www.mozilla.org/security/announce/2015/mfsa2015-66.html  View
130442 24735 CVE-2015-2734 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130443 24735 CVE-2015-2734 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130444 24735 CVE-2015-2734 75541  View
130445 24735 CVE-2015-2734 1032783  View
130446 24735 CVE-2015-2734 1032784  View
130447 24735 CVE-2015-2734 USN-2656-1  View
130448 24735 CVE-2015-2734 USN-2656-2  View
130449 24735 CVE-2015-2734 USN-2673-1  View
130450 24735 CVE-2015-2734 https://bugzilla.mozilla.org/show_bug.cgi?id=1166082  View
130451 24735 CVE-2015-2734 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8128 JVNDB-2015-003448 Mozilla Firefox および Thunderbird の Direct3D 9 の実装における脆弱性 Mozilla Firefox および Thunderbird の Direct3D 9 の実装の CairoTextureClientD3D9::BorrowDrawTarget 関数は、初期化されていないメモリ領域からデータを読み込むため、不特定の影響および攻撃を受ける脆弱性が存在します。 CVE-2015-2734 79959 CVE-2015-2734 24735 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003448.html 2015-07-02 2015-11-06 View