PT-2016-3918 · Mozilla · Firefox Os

Shally Li · Published 2016-01-09 · Updated 2016-01-14 · CVE-2015-8511

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5

Description A race condition exists in the lockscreen feature, allowing physically proximate attackers to bypass the intended passcode requirement.

Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2015-8511

Affected Products

Firefox Os

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-8511 · Security Note
• http://mozilla.org/security/announce/2015/mfsa2015-152.html · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1173284 · Note