Published: 24/09/2015 Updated: 22/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox prior to 41.0 allows remote malicious users to execute arbitrary code or cause a denial of service (use-after-free and application crash) by leveraging improper interaction between shared workers and the IndexedDB implementation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

This update provides compatible packages for Firefox 41 ...

USN-2743-1 introduced a regression in Firefox ...

Mozilla Foundation Security Advisory 2015-104 Use-after-free with shared workers and IndexedDB Announced September 22, 2015 Reporter Looben Yang Impact Critical Products Firefox, SeaMonkey Fixed in ...

Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 410 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) by leveraging improper interaction between shared workers and the IndexedDB implementation ...

CWE-362 NVD-CWE-Other https://bugzilla.mozilla.org/show_bug.cgi?id=1200004 http://www.mozilla.org/security/announce/2015/mfsa2015-104.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.securityfocus.com/bid/76815 http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html http://www.ubuntu.com/usn/USN-2743-4 http://www.ubuntu.com/usn/USN-2743-3 http://www.ubuntu.com/usn/USN-2743-2 http://www.ubuntu.com/usn/USN-2743-1 http://www.securitytracker.com/id/1033640 https://nvd.nist.gov https://usn.ubuntu.com/2743-1/https://access.redhat.com/security/cve/cve-2015-4510

CVE-2015-4510

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect