PT-2015-1009 · Mozilla+5 · Firefox Esr+7

Ilxu1A · Published 2015-03-20 · Updated 2024-12-12 · CVE-2015-0817

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0.3 Mozilla Firefox ESR versions prior to 31.5.2 SeaMonkey versions prior to 2.33.1

Description The issue is related to the asm.js implementation, which does not properly determine cases where bounds checking can be safely skipped during JIT compilation and heap access. This allows remote attackers to read or write to unintended memory locations and execute arbitrary code via crafted JavaScript.

Recommendations For Mozilla Firefox versions prior to 36.0.3, update to version 36.0.3 or later. For Mozilla Firefox ESR versions prior to 31.5.2, update to version 31.5.2 or later. For SeaMonkey versions prior to 2.33.1, update to version 2.33.1 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-17

CWE-20

Related Identifiers

ALT-PU-2015-1301

ALT-PU-2015-1321

ALT-PU-2015-1464

BDU:2015-09815

BDU:2015-09816

BDU:2015-09817

CESA-2015_0718

CVE-2015-0817

DSA-3201-1

MGASA-2015-0115

MGASA-2015-0126

OPENSUSE-SU-2015_0607-1

OPENSUSE-SU-2015_0636-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2015:0718

RHSA-2015_0718

SUSE-SU-2015:0630-1

SUSE-SU-2015_0593-1

SUSE-SU-2015_0593-2

SUSE-SU-2015_0630-1

USN-2538-1

ZDI-15-109

Affected Products

Alt Linux

Centos

Firefox

Firefox Esr

Red Hat

Seamonkey

Suse

Ubuntu

References · 2256

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• https://bdu.fstec.ru/vul/2015-09904 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2015-28 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09888 · Security Note
• https://bdu.fstec.ru/vul/2015-09892 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1584 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:0630-1 · Vendor Advisory
• http://mozilla.org/security/announce/2015/mfsa2015-29.html · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2015-27 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581 · Security Note
• https://mozilla.org/en-US/security/known-vulnerabilities/firefox-esr · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09816 · Security Note
• https://bdu.fstec.ru/vul/2015-09901 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html · Vendor Advisory