Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2715 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://www.securityfocus.com/bid/74611 - https://bugzilla.mozilla.org/show_bug.cgi?id=988698 - http://www.oracle.com/technet
://www.securityfocus.com/bid/74611 - https://bugzilla.mozilla.org/show_bug.cgi?id=988698 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2015/mfsa2015-53.html
CVE ID: CVE-2015-2716 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:37.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://rhn.redhat.com/errata/RHSA-2015-0988.html - https://www.tenable.com/security/tns-2016-20 - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbi
- https://www.tenable.com/security/tns-2016-20 - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - http://www.securityfocus.com/bid/74611 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - http://www.debian.org/security/2015/dsa-3264 - http://www.debian.org/security/2015/dsa-3260 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://www.mozilla.org/security/announce/2015/mfsa2015-5
p://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://www.mozilla.org/security/announce/2015/mfsa2015-54.html - http://www.ubuntu.com/usn/USN-2603-1 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - http://rhn.redhat.com/errata/RHSA-2015-1012.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://security.gentoo.org/glsa/201605-06 - https://bugzilla.mozilla.org/show_bug.cgi?id=1140537 - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2015-2717 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://www.securityfocus.com/bid/74611 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg0003
om/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - http://www.mozilla.org/security/announce/2015/mfsa2015-55.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1154683 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2015-2718 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2602-1 - http://www.securityfocus.com/bid/74611 - http://www.mozilla.org/security/announce/2015/mfsa2015-56.html - http://www.oracle.com/technetwork/topics/
m/bid/74611 - http://www.mozilla.org/security/announce/2015/mfsa2015-56.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html - https://security.gentoo.org/glsa/201605-06 - https://bugzilla.mozilla.org/show_bug.cgi?id=1146724
CVE ID: CVE-2015-2720 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T05:24:38.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might allow local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74611 - http://www.mozilla.org/security/announce/2015/mfsa2015-58.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1127481 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-295209
/bugzilla.mozilla.org/show_bug.cgi?id=1127481 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
CVE ID: CVE-2015-2721 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a "SMACK SKIP-TLS" issue. Additional Analyst Notes: - CVE Pro
recy property by blocking a ServerKeyExchange message, aka a "SMACK SKIP-TLS" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19_release_notes - http://www.securityfocus.com/bid/83398 - https://security.gentoo.org/glsa/201512-10 - https://security.gentoo.org/glsa/201701-46 - http://www.debian.org/security/2015/dsa-3336 - http://www.oracle.com/technetwork/security-advi
ntoo.org/glsa/201701-46 - http://www.debian.org/security/2015/dsa-3336 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securityfocus.com/bid/75541 - http://rhn.redhat.com/errata/RHSA-2015-1185.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2672-1 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - https://bugzilla.mozilla.org/show_bug.cgi?id=1086145 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://www.mozilla.org/security/announce/2015/mfsa2015-71.html - http://www
se-security-announce/2015-07/msg00034.html - http://www.mozilla.org/security/announce/2015/mfsa2015-71.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://rhn.redhat.com/errata/RHSA-2015-1664.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - https://smacktls.com - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2722 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo
-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.mozilla.org/security/announce/2015/mfsa2015-65.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - https:
tp://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1166924 - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2723 State: REJECTED Published: 2015-06-20T14:00:00 Last Updated: 2015-06-20T14:57:23 Description: No description available.
CVE ID: CVE-2015-2724 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensu
pensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - http://www.mozilla.org/security/announce/2015/mfsa2015-59.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1164567 - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1160884 - https://bugzilla.mozilla.org/show_bug.cgi?id=1154876 - http://www.securityfocus.com/bid/75541 - https://bugzilla.mozilla.org/show_bug.cgi?id=1143679 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/u
rk/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-251
/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2725 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-secur
unce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - http://www.mozilla.org/security/announce/2015/mfsa2015-59.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1163359 - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1159973 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - https://bugzilla.mozilla.org/
5-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1172076 - https://bugzilla.mozilla.org/show_bug.cgi?id=1151650 - https://bugzilla.mozilla.org/show_bug.cgi?id=1163852 - https://bugzilla.mozilla.org/show_bug.cgi?id=1159321 - http://www.ubuntu.com/usn/USN-2656-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1172397 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - https://bugzilla.mozilla.org/show_bug.cgi?id=1056410 - https://bugzilla.mozilla.org/show_bug.cgi?id=1156861 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/tec
https://bugzilla.mozilla.org/show_bug.cgi?id=1156861 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2726 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - http://www.mozilla.org/security/announce/2015/mfsa2015-59.html - https://
suse-security-announce/2015-07/msg00033.html - http://www.mozilla.org/security/announce/2015/mfsa2015-59.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1059081 - https://bugzilla.mozilla.org/show_bug.cgi?id=1146416 - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - https://bugzilla.mozilla.org/show_bug.cgi?id=1155985 - https://bugzilla.mozilla.org/show_bug.cgi?id=1132265 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1032784 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://www.ubuntu.com/usn/USN-2656-1 - https://bugzilla.mozilla.org/show_bug.cgi
curity-announce/2015-07/msg00034.html - http://www.ubuntu.com/usn/USN-2656-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1145781 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2727 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions. NOTE: this vulnerability exists because of a CVE-2015-0821 regression. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.c
ensuse-security-announce/2015-07/msg00025.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.mozilla.org/security/announce/2015/mfsa2015-60.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1163422 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.ubuntu.com/usn/USN-2656-1 - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2
CVE ID: CVE-2015-2728 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg000
nalyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1142210 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.mozilla.org/security/announce/2015/mfsa2015-61.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - h
security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2729 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - https://security.gentoo.o
er: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.ubuntu.com/usn/USN-2656-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1122218 - http://www.mozilla.org/security/announce/2015/mfsa2015-62.html - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2730 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-
ww.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - http://www.securityfocus.com/bid/83399 - https://security.gentoo.org/glsa/201512-10 - http://www.debian.org/security/2015/dsa-3336 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2672-1 - http://rhn.redhat.com/errata/RHSA-2015-1699.html - http://www.mozilla.org/security/announce/2015/mfsa2015-64.html - http://lists.opensuse.org/opensuse-security-announce/2015-07
//www.mozilla.org/security/announce/2015/mfsa2015-64.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1125025 - http://rhn.redhat.com/errata/RHSA-2015-1664.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2731 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-14