Description
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-3174-1 | iceweasel security update |
Debian DSA |
DSA-3179-1 | icedove security update |
EUVD |
EUVD-2015-0844 | Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation. |
Ubuntu USN |
USN-2505-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-2506-1 | Thunderbird vulnerabilities |
References
History
Mon, 21 Oct 2024 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs |
Mon, 21 Oct 2024 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:* |
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-06T04:26:10.736Z
Reserved: 2015-01-07T00:00:00.000Z
Link: CVE-2015-0831
No data.
Status : Deferred
Published: 2015-02-25T11:59:11.780
Modified: 2025-04-12T10:46:40.837
Link: CVE-2015-0831
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN