CVE-2015-4509

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3

Description The issue is related to a use-after-free vulnerability in the HTMLVideoElement interface, which can be exploited by remote attackers to execute arbitrary code via crafted JavaScript code. This code modifies the URI table of a media element.

Recommendations For Mozilla Firefox versions prior to 41.0, update to version 41.0 or later. For Mozilla Firefox ESR versions prior to 38.3, update to version 38.3 or later.