CVE-2015-4507

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0

Description The issue is related to errors in the JavaScript implementation code in Mozilla Firefox. When the Debugger API is enabled, a remote attacker can exploit this to cause a denial of service or possibly execute arbitrary code via a crafted web site. The SavedStacks class is specifically affected, leading to a getSlotRef assertion failure and application exit.

Recommendations For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider disabling the Debugger API until a patch is available.