PT-2015-2169 · Mozilla+3 · Firefox+3

Spandan Veggalam

·

Published

2015-09-22

·

Updated

2024-12-12

·

CVE-2015-4507

CVSS v2.0

5.1

Medium

VectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0
Description The issue is related to errors in the JavaScript implementation code in Mozilla Firefox. When the Debugger API is enabled, a remote attacker can exploit this to cause a denial of service or possibly execute arbitrary code via a crafted web site. The SavedStacks class is specifically affected, leading to a getSlotRef assertion failure and application exit.
Recommendations For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider disabling the Debugger API until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2015-1816
ALT-PU-2016-1454
BDU:2015-11515
CVE-2015-4507
MGASA-2015-0414
OPENSUSE-SU-2015_1658-1
OPENSUSE-SU-2015_1681-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
USN-2743-1
USN-2743-2
USN-2743-3
USN-2743-4

Affected Products

Alt Linux
Firefox
Suse
Ubuntu