Lucene search

Mozilla FoundationMFSA2015-85

HistoryAug 11, 2015 - 12:00 a.m.

Out-of-bounds write with Updater and malicious MAR file — Mozilla

2015-08-1100:00:00

Mozilla Foundation

www.mozilla.org

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.2%

JSON

Security researcher Holger Fuhrmannek reported that if the Updater opens a MAR format file with a specially crafted name, an out-of-bounds write will occur. This can lead to a potentially exploitable crash but requires that the malicious MAR format file be present on the local system and the Updater to be run to use it.

Affected configurations

Vulners

Node

mozillafirefoxRange<40

mozillafirefox_esrRange<38.2

mozillafirefox_osRange<2.5

mozillaseamonkeyRange<2.35

mozillathunderbirdRange<38.2

CPENameOperatorVersion
firefoxlt40
firefox esrlt38.2
firefox oslt2.5
seamonkeylt2.35
thunderbirdlt38.2

Name	Operator	Version
firefox	lt	40
firefox esr	lt	38.2
firefox os	lt	2.5
seamonkey	lt	2.35
thunderbird	lt	38.2

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4482

bugzilla.mozilla.org/show_bug.cgi?id=1184500

wiki.mozilla.org/Software_Update:MAR

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.2%

JSON

Related for MFSA2015-85