Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-4484
HistoryAug 11, 2015 - 12:00 a.m.

CVE-2015-4484

2015-08-1100:00:00
ubuntu.com
ubuntu.com
16

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.049

Percentile

92.8%

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript
implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before
38.2 allows remote attackers to cause a denial of service (application
crash) by leveraging the use of shared memory and accessing (1) an Atomics
object or (2) a SharedArrayBuffer object.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 40.0+build4-0ubuntu0.12.04.1UNKNOWN
ubuntu14.04noarchfirefox< 40.0+build4-0ubuntu0.14.04.1UNKNOWN
ubuntu15.04noarchfirefox< 40.0+build4-0ubuntu0.15.04.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.049

Percentile

92.8%