Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 5 min 141 bronnen
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2015-2722

HIGH · 10.0 CVSS Gepubliceerd:

Beschrijving

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.

Vendors

Oracle Mozilla Novell

Affected products

Solaris Firefox Firefox Esr Suse Linux Enterprise Software Development Kit Suse Linux Enterprise Desktop Suse Linux Enterprise Server

References