PT-2015-2139

CVE-2015-7180

·

Published

2015-09-22

·

Updated

2024-12-12

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3
Description The issue is caused by a buffer overflow in the ReadbackResultWriterD3D11::Run function. This can be exploited by a remote attacker to cause a denial of service due to the function's incorrect handling of return data, potentially leading to memory corruption and application crash.
Recommendations For Firefox versions prior to 41.0, update to version 41.0 or later to resolve the issue. For Firefox ESR versions prior to 38.3, update to version 38.3 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2015-1816
ALT-PU-2016-1454
CESA-2015_1834
CESA-2015_1852
DSA-3365-1
MGASA-2015-0382
MGASA-2015-0387
OPENSUSE-SU-2015_1658-1
OPENSUSE-SU-2015_1679-1
OPENSUSE-SU-2015_1681-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2015:1834
RHSA-2015_1834
RHSA-2015:1852
RHSA-2015_1852
SUSE-SU-2015:1680-1
SUSE-SU-2015:1703-1
USN-2743-1
USN-2743-2
USN-2743-3
USN-2743-4
USN-2754-1
Found an issue in the description? Have something to add? Feel free to write us 👾