PT-2015-2875

CVE-2015-7220

·

Published

2015-12-15

·

Updated

2024-06-15

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0
Description The issue is caused by a buffer overflow in the XDRBuffer::grow function, located in js/src/vm/Xdr.cpp. This can be exploited by remote attackers using specially crafted JavaScript code, potentially leading to a denial of service or other unspecified impacts.
Recommendations For versions prior to 43.0, update to version 43.0 or later to resolve the issue. As a temporary workaround, consider restricting the execution of crafted JavaScript code until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2015-2196
ALT-PU-2016-1454
MGASA-2016-0124
OPENSUSE-SU-2024:10071-1
USN-2833-1
Found an issue in the description? Have something to add? Feel free to write us 👾