PT-2015-2169 · Mozilla+3 · Firefox+3

Spandan Veggalam

·

Publicado

2015-09-22

·

Atualizado

2024-12-12

·

CVE-2015-4507

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0
Description The issue is related to errors in the JavaScript implementation code in Mozilla Firefox. When the Debugger API is enabled, a remote attacker can exploit this to cause a denial of service or possibly execute arbitrary code via a crafted web site. The SavedStacks class is specifically affected, leading to a getSlotRef assertion failure and application exit.
Recommendations For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider disabling the Debugger API until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1816
ALT-PU-2016-1454
BDU:2015-11515
CVE-2015-4507
MGASA-2015-0414
OPENSUSE-SU-2015_1658-1
OPENSUSE-SU-2015_1681-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
USN-2743-1
USN-2743-2
USN-2743-3
USN-2743-4

Produtos afetados

Alt Linux
Firefox
Suse
Ubuntu