Lucene search

K
cveMozillaCVE-2015-4507
HistorySep 24, 2015 - 4:59 a.m.

CVE-2015-4507

2015-09-2404:59:10
mozilla
web.nvd.nist.gov
49
cve-2015-4507
savedstacks class
javascript
mozilla firefox
denial of service
remote attackers
execute arbitrary code

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.017

Percentile

87.8%

The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site.

Affected configurations

Nvd
Node
mozillafirefoxRange40.0.3
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.017

Percentile

87.8%