NVD

Id
24738  
Name
CVE-2015-2737  
Description
The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2737  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130492 24738 CVE-2015-2737 openSUSE-SU-2015:1229  View
130493 24738 CVE-2015-2737 openSUSE-SU-2015:1266  View
130494 24738 CVE-2015-2737 SUSE-SU-2015:1268  View
130495 24738 CVE-2015-2737 SUSE-SU-2015:1269  View
130496 24738 CVE-2015-2737 SUSE-SU-2015:1449  View
130497 24738 CVE-2015-2737 RHSA-2015:1207  View
130498 24738 CVE-2015-2737 RHSA-2015:1455  View
130499 24738 CVE-2015-2737 DSA-3300  View
130500 24738 CVE-2015-2737 DSA-3324  View
130501 24738 CVE-2015-2737 http://www.mozilla.org/security/announce/2015/mfsa2015-66.html  View
130502 24738 CVE-2015-2737 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130503 24738 CVE-2015-2737 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130504 24738 CVE-2015-2737 75541  View
130505 24738 CVE-2015-2737 1032783  View
130506 24738 CVE-2015-2737 1032784  View
130507 24738 CVE-2015-2737 USN-2656-1  View
130508 24738 CVE-2015-2737 USN-2656-2  View
130509 24738 CVE-2015-2737 USN-2673-1  View
130510 24738 CVE-2015-2737 https://bugzilla.mozilla.org/show_bug.cgi?id=1167332  View
130511 24738 CVE-2015-2737 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8131 JVNDB-2015-003451 Mozilla Firefox および Thunderbird の Direct3D 11 の実装の rx::d3d11::SetBufferData 関数における脆弱性 Mozilla Firefox および Thunderbird の Direct3D 11 の実装の rx::d3d11::SetBufferData 関数は、初期化されていないメモリ領域からデータを読み込むため、不特定の影響および攻撃を受ける脆弱性が存在します。 CVE-2015-2737 79962 CVE-2015-2737 24738 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003451.html 2015-07-02 2015-11-06 View