NVD

Id
25920  
Name
CVE-2015-4497  
Description
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-08-29  
Modified Date
2016-12-21  
Seq
2015-4497  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136853 25920 CVE-2015-4497 SUSE-SU-2015:1504  View
136854 25920 CVE-2015-4497 SUSE-SU-2015:2081  View
136855 25920 CVE-2015-4497 openSUSE-SU-2015:1492  View
136856 25920 CVE-2015-4497 RHSA-2015:1693  View
136857 25920 CVE-2015-4497 DSA-3345  View
136858 25920 CVE-2015-4497 http://www.mozilla.org/security/announce/2015/mfsa2015-94.html  View
136859 25920 CVE-2015-4497 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136860 25920 CVE-2015-4497 76502  View
136861 25920 CVE-2015-4497 1033397  View
136862 25920 CVE-2015-4497 USN-2723-1  View
136863 25920 CVE-2015-4497 http://www.zerodayinitiative.com/advisories/ZDI-15-406  View
136864 25920 CVE-2015-4497 https://bugzilla.mozilla.org/show_bug.cgi?id=1164766  View
136865 25920 CVE-2015-4497 https://bugzilla.mozilla.org/show_bug.cgi?id=1175278  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9180 JVNDB-2015-004500 Mozilla Firefox の CanvasRenderingContext2D の実装における任意のコードを実行される脆弱性 Mozilla Firefox の CanvasRenderingContext2D の実装には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-4497 81722 CVE-2015-4497 25920 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004500.html 2015-08-27 2015-09-01 View