ISOMAN

CVE

CVE-2015-0831

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

Severity
MEDIUM
CVSS
6.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
  2. http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
  3. http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
  4. http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
  5. http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
  6. http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
  7. http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
  8. http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
  9. http://rhn.redhat.com/errata/RHSA-2015-0265.html
  10. http://rhn.redhat.com/errata/RHSA-2015-0266.html
  11. http://rhn.redhat.com/errata/RHSA-2015-0642.html
  12. http://www.debian.org/security/2015/dsa-3174
  13. http://www.debian.org/security/2015/dsa-3179
  14. http://www.mozilla.org/security/announce/2015/mfsa2015-16.html
  15. http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
  16. http://www.securityfocus.com/bid/72746
  17. http://www.securitytracker.com/id/1031791
  18. http://www.securitytracker.com/id/1031792
  19. http://www.ubuntu.com/usn/USN-2505-1
  20. http://www.ubuntu.com/usn/USN-2506-1