PT-2015-2139 · Mozilla+5 · Firefox+5

Q1

·

Published

2015-09-22

·

Updated

2024-12-12

·

CVE-2015-7180

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3
Description The issue is caused by a buffer overflow in the ReadbackResultWriterD3D11::Run function. This can be exploited by a remote attacker to cause a denial of service due to the function's incorrect handling of return data, potentially leading to memory corruption and application crash.
Recommendations For Firefox versions prior to 41.0, update to version 41.0 or later to resolve the issue. For Firefox ESR versions prior to 38.3, update to version 38.3 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2015-1816
ALT-PU-2016-1454
BDU:2015-11485
CESA-2015_1834
CESA-2015_1852
CVE-2015-7180
DSA-3365-1
MGASA-2015-0382
MGASA-2015-0387
OPENSUSE-SU-2015_1658-1
OPENSUSE-SU-2015_1679-1
OPENSUSE-SU-2015_1681-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2015:1834
RHSA-2015:1852
RHSA-2015_1834
RHSA-2015_1852
SUSE-SU-2015:1680-1
SUSE-SU-2015:1703-1
USN-2743-1
USN-2743-2
USN-2743-3
USN-2743-4
USN-2754-1

Affected Products

Alt Linux
Centos
Firefox
Red Hat
Suse
Ubuntu