CVE-2015-2712

2015-05-1300:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.041 Low

EPSS

Percentile

92.2%

JSON

The asm.js implementation in Mozilla Firefox before 38.0 does not properly
determine heap lengths during identification of cases in which bounds
checking may be safely skipped, which allows remote attackers to trigger
out-of-bounds write operations and possibly execute arbitrary code, or
trigger out-of-bounds read operations and possibly obtain sensitive
information from process memory, via crafted JavaScript.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 38.0+build3-0ubuntu0.12.04.1UNKNOWN
ubuntu14.04noarchfirefox< 38.0+build3-0ubuntu0.14.04.1UNKNOWN
ubuntu14.10noarchfirefox< 38.0+build3-0ubuntu0.14.10.1UNKNOWN
ubuntu15.04noarchfirefox< 38.0+build3-0ubuntu0.15.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 38.0+build3-0ubuntu0.12.04.1	UNKNOWN
ubuntu	14.04	noarch	firefox	< 38.0+build3-0ubuntu0.14.04.1	UNKNOWN
ubuntu	14.10	noarch	firefox	< 38.0+build3-0ubuntu0.14.10.1	UNKNOWN
ubuntu	15.04	noarch	firefox	< 38.0+build3-0ubuntu0.15.04.1	UNKNOWN