Lucene search
Mozilla FoundationMFSA2015-50HistoryMay 12, 2015 - 12:00 a.m.
Out-of-bounds read and write in asm.js validation — Mozilla
2015-05-1200:00:00
Mozilla Foundation
www.mozilla.org
20
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.041 Low
EPSS
Percentile
92.2%
Security researcher Dougall Johnson reported an out-of-bounds read and write in asm.js during JavaScript validation due to an error in how heap lengths are defined. This results in a potentially exploitable crash and could allow for the reading of random memory which may contain sensitive data.
Affected configurations
Node
mozillafirefoxRange<38
ORmozillaseamonkeyRange<2.35
Related
nvd
nvd
CVE-2015-2712
2015-05-14 10:59:05
cve
cve
CVE-2015-2712
2015-05-14 10:59:05
ubuntucve
ubuntucve
CVE-2015-2712
2015-05-13 00:00:00
prion
prion
Out-of-bounds
2015-05-14 10:59:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-50) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-2602-1)
2015-06-09 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Mac OS X
2015-05-21 00:00:00
cvelist
cvelist
CVE-2015-2712
2015-05-14 10:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-05-13 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-05-13 00:00:00
nessus
nessus
Firefox < 38.0 Multiple Vulnerabilities (Mac OS X)
2015-05-13 00:00:00
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2602-1)
2015-05-13 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-2015-375)
2015-05-26 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-05-12 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-05-13 00:00:00
kaspersky
kaspersky
KLA10584 Multiple vulnerabilities in Mozilla products
2015-05-12 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.041 Low
EPSS
Percentile
92.2%
Related for MFSA2015-50