Lucene search

K
cve[email protected]CVE-2015-4513
HistoryNov 05, 2015 - 5:59 a.m.

CVE-2015-4513

2015-11-0505:59:00
CWE-119
web.nvd.nist.gov
72
cve-2015-4513
mozilla firefox
denial of service
memory corruption
application crash
remote attack
arbitrary code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

10 High

AI Score

Confidence

High

0.06 Low

EPSS

Percentile

93.5%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected configurations

NVD
Node
mozillafirefoxRange41.0.2
Node
mozillafirefox_esrMatch38.0
OR
mozillafirefox_esrMatch38.0.1
OR
mozillafirefox_esrMatch38.0.5
OR
mozillafirefox_esrMatch38.1.0
OR
mozillafirefox_esrMatch38.1.1
OR
mozillafirefox_esrMatch38.2.0
OR
mozillafirefox_esrMatch38.2.1
OR
mozillafirefox_esrMatch38.3.0
CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle41.0.2

References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

10 High

AI Score

Confidence

High

0.06 Low

EPSS

Percentile

93.5%