Lucene search
PRIOn knowledge basePRION:CVE-2015-0804HistoryApr 01, 2015 - 10:59 a.m.
Input validation
2015-04-0110:59:00
PRIOn knowledge base
www.prio-n.com
2
The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.10 | |
| ubuntu_linux | eq | 14.04 | |
| firefox | le | 36.0.4 | |
| opensuse | eq | 13.1 | |
| opensuse | eq | 13.2 |
References
lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
www.mozilla.org/security/announce/2015/mfsa2015-39.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securitytracker.com/id/1031996
www.ubuntu.com/usn/USN-2550-1
bugzilla.mozilla.org/show_bug.cgi?id=1134560
security.gentoo.org/glsa/201512-10
Related
ubuntucve
ubuntucve
CVE-2015-0804
2015-04-01 00:00:00
nvd
nvd
CVE-2015-0804
2015-04-01 10:59:05
cve
cve
CVE-2015-0804
2015-04-01 10:59:05
cvelist
cvelist
CVE-2015-0804
2015-04-01 10:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-39) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Windows
2015-04-06 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Mac OS X
2015-04-06 00:00:00
mozilla
mozilla
Use-after-free due to type confusion flaws — Mozilla
2015-03-31 00:00:00
kaspersky
kaspersky
nessus
nessus
Firefox < 37.0 Multiple Vulnerabilities
2015-04-01 00:00:00
openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-nspr (openSUSE-2015-290)
2015-04-09 00:00:00
Firefox < 37.0 Multiple Vulnerabilities (Mac OS X)
2015-04-01 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-04-01 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-04-01 00:00:00
suse
suse
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-03-31 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-04-08 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00