Lucene search
K

5 matches found

BDU FSTEC
BDU FSTEC
added 2015/05/18 12:0 a.m.2 views

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the Mozilla Firefox browser exists due to a memory handling error in the function AsyncPaintWaitEvent::AsyncPaintWaitEvent. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by using a specially crafted plugin that improperl...

6.8CVSS0.01133EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2015/04/27 11:59 a.m.19 views

Race condition

Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via a crafted plugin that does not properly complete initialization...

6.8CVSS8.1AI score0.01133EPSS
Exploits0References9Affected Software1
CNVD
CNVD
added 2015/04/24 12:0 a.m.3 views

Mozilla Firefox 'AsyncPaintWaitEvent::AsyncPaintWaitEvent()' Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A memory misreference vulnerability exists in the 'AsyncPaintWaitEvent::AsyncPaintWaitEvent' function in versions of Mozilla Firefox prior to 37.0.2, which stems from a competing conditional...

6.8CVSS7.3AI score0.01133EPSS
Exploits0References1
ArchLinux
ArchLinux
added 2015/04/22 12:0 a.m.37 views

firefox: arbitrary code execution

Mozilla developer Robert Kaiser reported that a specially crafted HTML, when loaded by the target user, will trigger a use-after-free race condition when a plugin fails to initialize, which may lead to a memory corruption error in AsyncPaintWaitEvent::AsyncPaintWaitEvent and arbitrary code...

6.8CVSS2.2AI score0.01133EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2015/04/21 12:0 a.m.22 views

CVE-2015-2706

Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via a crafted plugin that does not properly complete initialization...

6.8CVSS7.3AI score0.01133EPSS
Exploits0References3
Rows per page
Query Builder