Firefox Code Execution

The vulnerability of the CSPService::ShouldLoad function in Firefox browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the client side by manipulating the DOM objects...

Mozilla Firefox/Firefox ESR/Thunderbird CSPService::ShouldLoad Function Memory Misreference Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. A memory misreference vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird CSPService::ShouldLoad function, which can be exploited by remote attackers to execute arbitrary code...

CVE-2015-2731

CVE-2015-2731 is a use-after-free vulnerability in the CSPService::ShouldLoad function of Firefox’s microtask implementation (and affects Thunderbird). An attacker could trigger removal of a DOM object via client-side JavaScript based on a Content Policy, leading to remote code execution. Affecte...

CVE-2015-2731

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

CVE-2015-2731: Undefined Security Weakness

Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...

PT-2015-1438

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Mozilla Firefox ESR versions 38.x prior to 38.1 Thunderbird versions prior to 38.1 Description The issue is related to a use-after-free vulnerability in the CSPService::ShouldLoad function, which can be...