CVE-2015-2731

CVE-2015-2731 is a use-after-free vulnerability in the CSPService::ShouldLoad function of Firefox’s microtask implementation (and affects Thunderbird). An attacker could trigger removal of a DOM object via client-side JavaScript based on a Content Policy, leading to remote code execution. Affecte...

CVE-2015-2731: Undefined Security Weakness

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

PT-2015-1438

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Mozilla Firefox ESR versions 38.x prior to 38.1 Thunderbird versions prior to 38.1 Description The issue is related to a use-after-free vulnerability in the CSPService::ShouldLoad function, which can be...