PT-2015-5851
CVE-2015-2713
·
تاريخ النشر
2015-05-12
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 38.0
Firefox ESR versions 31.x prior to 31.7
Thunderbird versions prior to 31.7
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text. The vulnerability is related to the SetBreaks function.
Recommendations
For Mozilla Firefox versions prior to 38.0, update to version 38.0 or later.
For Firefox ESR versions 31.x prior to 31.7, update to version 31.7 or later.
For Thunderbird versions prior to 31.7, update to version 31.7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾