CVE-2015-4497

2015-08-2919:59:00

mozilla

web.nvd.nist.gov

168

cve-2015-4497

mozilla firefox

canvasrenderingcontext2d

vulnerability

remote code execution

css token sequences

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.187

Percentile

96.3%

JSON

Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.

Affected configurations

Nvd

Node

mozillafirefoxMatch40.0.2

mozillafirefox_esrMatch38.0

mozillafirefox_esrMatch38.0.1

mozillafirefox_esrMatch38.0.5

mozillafirefox_esrMatch38.1.0

mozillafirefox_esrMatch38.2.0

VendorProductVersionCPE
mozillafirefox40.0.2cpe:2.3:a:mozilla:firefox:40.0.2:*:*:*:*:*:*:*
mozillafirefox_esr38.0cpe:2.3:a:mozilla:firefox_esr:38.0:*:*:*:*:*:*:*
mozillafirefox_esr38.0.1cpe:2.3:a:mozilla:firefox_esr:38.0.1:*:*:*:*:*:*:*
mozillafirefox_esr38.0.5cpe:2.3:a:mozilla:firefox_esr:38.0.5:*:*:*:*:*:*:*
mozillafirefox_esr38.1.0cpe:2.3:a:mozilla:firefox_esr:38.1.0:*:*:*:*:*:*:*
mozillafirefox_esr38.2.0cpe:2.3:a:mozilla:firefox_esr:38.2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	40.0.2	cpe:2.3:a:mozilla:firefox:40.0.2:::::::*
mozilla	firefox_esr	38.0	cpe:2.3:a:mozilla:firefox_esr:38.0:::::::*
mozilla	firefox_esr	38.0.1	cpe:2.3:a:mozilla:firefox_esr:38.0.1:::::::*
mozilla	firefox_esr	38.0.5	cpe:2.3:a:mozilla:firefox_esr:38.0.5:::::::*
mozilla	firefox_esr	38.1.0	cpe:2.3:a:mozilla:firefox_esr:38.1.0:::::::*
mozilla	firefox_esr	38.2.0	cpe:2.3:a:mozilla:firefox_esr:38.2.0:::::::*