Lucene search

K
cve[email protected]CVE-2015-7192
HistoryNov 05, 2015 - 5:59 a.m.

CVE-2015-7192

2015-11-0505:59:16
CWE-17
web.nvd.nist.gov
39
cve-2015-7192
mozilla firefox
os x
accessibility-tools
denial of service
application crash
arbitrary code
nvd
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.6 High

AI Score

Confidence

High

0.042 Low

EPSS

Percentile

92.3%

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value to reference a row index.

Affected configurations

NVD
Node
mozillafirefoxRange41.0.2
AND
applemac_os_x
CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle41.0.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.6 High

AI Score

Confidence

High

0.042 Low

EPSS

Percentile

92.3%