Lucene search
Mozilla FoundationMFSA2015-23HistoryFeb 24, 2015 - 12:00 a.m.
Use-after-free in Developer Console date with OpenType Sanitiser — Mozilla
2015-02-2400:00:00
Mozilla Foundation
www.mozilla.org
30
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.01
Percentile
83.6%
Using the Address Sanitizer tool, security researcher Atte Kettunen found a problem with OpenType Sanitiser (OTS) that resulted in a use-after-free while expanding macros in some circumstances. This use-after-free was only used for information displayed in the developer console and was not exploitable.
Affected configurations
Node
mozillafirefoxRange<36
Related
ubuntucve
ubuntucve
CVE-2015-0823
2015-02-25 00:00:00
cvelist
cvelist
CVE-2015-0823
2015-02-25 11:00:00
nvd
nvd
CVE-2015-0823
2015-02-25 11:59:04
prion
prion
Design/Logic Flaw
2015-02-25 11:59:00
cve
cve
CVE-2015-0823
2015-02-25 11:59:04
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-23) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-2505-2)
2015-03-10 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Mar 2015) - Mac OS X
2015-03-03 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-02-25 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Firefox regression (USN-2505-2)
2015-03-10 00:00:00
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2505-1)
2015-02-26 00:00:00
Mozilla Firefox ESR < 31.5 Multiple Vulnerabilities
2019-11-06 00:00:00
ubuntu
ubuntu
Firefox regression
2015-03-09 00:00:00
Firefox vulnerabilities
2015-02-25 00:00:00
suse
suse
Security update for MozillaFirefox, mozilla-nss (important)
2015-03-01 11:04:54
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-02-24 00:00:00
kaspersky
kaspersky
KLA10464 Multiple vulnerabilities in Mozilla products
2015-02-24 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-03-22 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.01
Percentile
83.6%
Related for MFSA2015-23