Lucene search

K
nvd[email protected]NVD:CVE-2015-2742
HistoryJul 06, 2015 - 2:01 a.m.

CVE-2015-2742

2015-07-0602:01:10
CWE-200
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

0.003

Percentile

70.0%

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.

Affected configurations

Nvd
Node
oraclesolarisMatch11.3
Node
mozillafirefoxRange38.1.0
AND
applemacos

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

0.003

Percentile

70.0%