PT-2015-1037

CVE-2015-0814

Published

2015-03-31

Updated

2024-12-12

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0

Description The issue allows a remote attacker to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions prior to 37.0, update to version 37.0 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Christian Holler

Decoder

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation