Lucene search

K
kasperskyKaspersky LabKLA10554
HistoryApr 20, 2015 - 12:00 a.m.

KLA10554 Denial of service vulnerability in Mozilla Firefox

2015-04-2000:00:00
Kaspersky Lab
threats.kaspersky.com
30

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.078 Low

EPSS

Percentile

94.1%

Detect date:

04/20/2015

Severity:

High

Description:

Race condition was found in Mozilla Firefox. By exploiting this vulnerability malicious users can cause denial of service or other unknown impact. This vulnerability can be exploited remotely via an unknown vectors related to plugins.

Affected products:

Mozilla Firefox versions earlier than 37.0.2

Solution:

Update to the latest version
Get Firefox

Original advisories:

MFSA

Impacts:

DoS

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2015-27066.8High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.078 Low

EPSS

Percentile

94.1%