PT-2015-1518 · Mozilla+5 · Firefox+6

Bandha890

·

Publicado

2015-07-02

·

Atualizado

2024-12-12

·

CVE-2015-2728

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Mozilla Firefox ESR versions prior to 31.8 Mozilla Firefox ESR versions prior to 38.1
Description The vulnerability is related to a "type confusion" issue in the IndexedDB implementation, allowing remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. This issue is caused by the misinterpretation of an unspecified IDBDatabase field as a pointer, leading to memory corruption and application crash.
Recommendations For Mozilla Firefox versions prior to 39.0, update to version 39.0 or later. For Mozilla Firefox ESR versions prior to 31.8, update to version 31.8 or later. For Mozilla Firefox ESR versions prior to 38.1, update to version 38.1 or later.

Exploit

Correção

Type Confusion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

ALT-PU-2015-1667
ALT-PU-2015-1669
BDU:2015-10810
BDU:2015-10811
CESA-2015_1207
CVE-2015-2728
DSA-3300-1
MGASA-2015-0268
OPENSUSE-SU-2015_1229-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2015:1207
RHSA-2015_1207
SUSE-SU-2015:1268-1
SUSE-SU-2015:1268-2
SUSE-SU-2015:1269-1
SUSE-SU-2015:1449-1
USN-2656-1
USN-2656-2

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Ubuntu