Lucene search
MozillaCVELIST:CVE-2015-0804HistoryApr 01, 2015 - 10:00 a.m.
CVE-2015-0804
2015-04-0110:00:00
mozilla
www.cve.org
The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
References
lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
www.mozilla.org/security/announce/2015/mfsa2015-39.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securitytracker.com/id/1031996
www.ubuntu.com/usn/USN-2550-1
bugzilla.mozilla.org/show_bug.cgi?id=1134560
security.gentoo.org/glsa/201512-10
Related
nvd
nvd
CVE-2015-0804
2015-04-01 10:59:05
ubuntucve
ubuntucve
CVE-2015-0804
2015-04-01 00:00:00
prion
prion
Input validation
2015-04-01 10:59:00
cve
cve
CVE-2015-0804
2015-04-01 10:59:05
mozilla
mozilla
Use-after-free due to type confusion flaws — Mozilla
2015-03-31 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-39) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Windows
2015-04-06 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Mac OS X
2015-04-06 00:00:00
kaspersky
kaspersky
archlinux
archlinux
firefox: multiple issues
2015-04-01 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2550-1)
2015-04-02 00:00:00
openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-nspr (openSUSE-2015-290)
2015-04-09 00:00:00
Firefox < 37.0 Multiple Vulnerabilities
2015-04-01 00:00:00
suse
suse
ubuntu
ubuntu
Firefox vulnerabilities
2015-04-01 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-03-31 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-04-08 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00