CVE-2015-2733 Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitr...
HighCVSS 10.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 38.1.0 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Firefox | = 31.1.0 | No fix listed |
| mozilla Firefox | = 31.1.1 | No fix listed |
| mozilla Firefox | = 31.3.0 | No fix listed |
| mozilla Firefox | = 31.5.1 | No fix listed |
| mozilla Firefox | = 31.5.2 | No fix listed |
| mozilla Firefox | = 31.5.3 | No fix listed |
| mozilla Firefox | = 38.0 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| mozilla firefox esr | = 31.1 | No fix listed |
| mozilla firefox esr | = 31.2 | No fix listed |
| mozilla firefox esr | = 31.3 | No fix listed |
| mozilla firefox esr | = 31.4 | No fix listed |
| mozilla firefox esr | = 31.5 | No fix listed |
| mozilla firefox esr | = 31.6.0 | No fix listed |
| mozilla firefox esr | = 31.7.0 | No fix listed |
| novell suse linux enterprise desktop | = 11-sp4 | No fix listed |
| novell suse linux enterprise desktop | = 12.0 | No fix listed |
| novell suse linux enterprise server | = 12.0 | No fix listed |
References
- openSUSE-SU-2015:1229 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- SUSE-SU-2015:1268 third-party-advisory vendor-advisory
- SUSE-SU-2015:1269 third-party-advisory vendor-advisory
- SUSE-SU-2015:1449 vendor-advisory
- RHSA-2015:1207 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 75541 vdb-entry
- 1032783 vdb-entry
- 1032784 vdb-entry
- USN-2656-1 vendor-advisory
- USN-2656-2 vendor-advisory
- bugzilla.mozilla.org issue-tracking
- GLSA-201512-10 vendor-advisory