Lucene search

K
cve[email protected]CVE-2015-0808
HistoryApr 01, 2015 - 10:59 a.m.

CVE-2015-0808

2015-04-0110:59:09
CWE-17
web.nvd.nist.gov
46
mozilla
firefox
webrtc
memory corruption
cve-2015-0808
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.8

Confidence

High

EPSS

0.018

Percentile

88.2%

The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors.

Affected configurations

NVD
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
Node
mozillafirefoxRange36.0.4
VendorProductVersionCPE
opensuseopensuse13.2cpe:/o:opensuse:opensuse:13.2:::
opensuseopensuse13.1cpe:/o:opensuse:opensuse:13.1:::

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.8

Confidence

High

EPSS

0.018

Percentile

88.2%