Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-4482
HistoryAug 16, 2015 - 12:00 a.m.

CVE-2015-4482

2015-08-1600:00:00
ubuntu.com
ubuntu.com
9

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.2%

mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR
38.x before 38.2 allows local users to gain privileges or cause a denial of
service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka
MAR) file.

Notes

Author Note
chrisccoulson Affects Mozilla updater

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.2%