Lucene search

PRIOn knowledge basePRION:CVE-2015-0805

HistoryApr 01, 2015 - 10:59 a.m.

Memory corruption

2015-04-0110:59:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.4%

JSON

The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.

CPENameOperatorVersion
ubuntu_linuxeq12.04
ubuntu_linuxeq14.10
ubuntu_linuxeq14.04
firefoxle36.0.4
opensuseeq13.1
opensuseeq13.2

Name	Operator	Version
ubuntu_linux	eq	12.04
ubuntu_linux	eq	14.10
ubuntu_linux	eq	14.04
firefox	le	36.0.4
opensuse	eq	13.1
opensuse	eq	13.2

References

lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html

www.mozilla.org/security/announce/2015/mfsa2015-38.html

www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

www.securitytracker.com/id/1031996

www.ubuntu.com/usn/USN-2550-1

bugzilla.mozilla.org/show_bug.cgi?id=1135511

security.gentoo.org/glsa/201512-10