ISOMAN

CVE

CVE-2015-4492

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
  2. http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
  3. http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
  4. http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
  5. http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
  6. http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
  7. http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
  8. http://rhn.redhat.com/errata/RHSA-2015-1586.html
  9. http://www.debian.org/security/2015/dsa-3333
  10. http://www.mozilla.org/security/announce/2015/mfsa2015-92.html
  11. http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
  12. http://www.securityfocus.com/bid/76297
  13. http://www.securitytracker.com/id/1033247
  14. http://www.ubuntu.com/usn/USN-2702-1
  15. http://www.ubuntu.com/usn/USN-2702-2
  16. http://www.ubuntu.com/usn/USN-2702-3
  17. https://bugzilla.mozilla.org/show_bug.cgi?id=1185820
  18. https://security.gentoo.org/glsa/201605-06
  19. http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
  20. http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html