Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-4482
HistoryAug 16, 2015 - 12:00 a.m.

CVE-2015-4482

2015-08-1600:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

26.2%

mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR
38.x before 38.2 allows local users to gain privileges or cause a denial of
service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka
MAR) file.

Notes

Author Note
chrisccoulson Affects Mozilla updater

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

26.2%