CVE Vulnerabilities

CVE-2015-2728

Published: Jul 06, 2015 | Modified: Dec 28, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a type confusion issue.

Affected Software

Name Vendor Start Version End Version
Suse_linux_enterprise_desktop Novell 12.0 (including) 12.0 (including)
Suse_linux_enterprise_server Novell 11-sp4 (including) 11-sp4 (including)
Suse_linux_enterprise_server Novell 12.0 (including) 12.0 (including)

References