Lucene search
Mozilla FoundationMFSA2015-130HistoryNov 03, 2015 - 12:00 a.m.
JavaScript garbage collection crash with Java applet — Mozilla
2015-11-0300:00:00
Mozilla Foundation
www.mozilla.org
11
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.085 Low
EPSS
Percentile
94.4%
Mozilla community member Vytautas Staraitis reported an issue with the interaction of Java applets and JavaScript. The Java plugin can deallocate a JavaScript wrapper when it is still in use, which leads to a JavaScript garbage collection crash. This crash is potentially exploitable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 42 | |
| firefox esr | lt | 38.4 |
Related
prion
prion
Code injection
2015-11-05 05:59:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-130) - Linux
2021-11-11 00:00:00
CentOS Update for firefox CESA-2015:1982 centos5
2015-11-05 00:00:00
CentOS Update for firefox CESA-2015:1982 centos6
2015-11-05 00:00:00
ubuntucve
ubuntucve
CVE-2015-7196
2015-11-04 00:00:00
cve
cve
CVE-2015-7196
2015-11-05 05:59:00
cvelist
cvelist
CVE-2015-7196
2015-11-05 02:00:00
veracode
veracode
Authentication Bypass
2019-05-02 05:43:38
Privilege Escalation
2019-05-02 05:43:39
Arbitrary Code Execution
2019-05-02 05:43:38
oraclelinux
oraclelinux
firefox security update
2015-11-04 00:00:00
nessus
nessus
Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20151104)
2015-11-05 00:00:00
Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-1982)
2015-11-05 00:00:00
CentOS 5 / 6 / 7 : firefox (CESA-2015:1982)
2015-11-05 00:00:00
centos
centos
firefox security update
2015-11-04 15:58:03
redhat
redhat
(RHSA-2015:1982) Critical: firefox security update
2015-11-04 00:00:00
mageia
mageia
Updated firefox, nspr, nss packages fix security vulnerability
2015-11-04 21:03:05
Updated iceape packages fix security vulnerabilities
2015-11-17 00:36:58
suse
suse
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-06 17:11:17
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-12 20:10:40
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-12 17:11:49
debian
debian
[SECURITY] [DSA 3393-1] iceweasel security update
2015-11-04 18:42:15
ubuntu
ubuntu
Firefox vulnerabilities
2015-11-04 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-11-04 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-11-03 00:00:00
kaspersky
kaspersky
KLA10689 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2015-11-03 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.085 Low
EPSS
Percentile
94.4%
Related for MFSA2015-130