CVE-2015-4503

2015-09-2400:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.8%

JSON

The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles
array boundaries that were established with a navigator.mozTCPSocket.open
method call and send method calls, which allows remote TCP servers to
obtain sensitive information from process memory by reading packet data, as
demonstrated by availability of this API in a Firefox OS application.