CVE-2015-2715 — Race Condition in Mozilla Firefox

CWE-362 — Race ConditionCWE-416 — Use After Free7 documents6 sources
Severity
6.8MEDIUMNVD
OSV7.5
EPSS
1.4%
top 19.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxOpensuse
Timeline
PublishedMay 14
Latest updateMay 14

Description

Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶Ubuntumozilla/firefox< 38.0+build3-0ubuntu0.14.04.1
▶NVDmozilla/firefox37.0.2
▶NVDopensuse/opensuse13.1, 13.2+1

🔴Vulnerability Details

3
GHSA
GHSA-7qjx-chpf-r2c4: Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38↗2022-05-14
▶
OSV
firefox vulnerabilities↗2015-05-13
▶
OSV
CVE-2015-2715: Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38↗2015-05-13
▶

📋Vendor Advisories

2
Ubuntu
Firefox vulnerabilities↗2015-05-13
▶
Red Hat
Mozilla: Use-after-free due to Media Decoder Thread creation during shutdown (MFSA 2015-53)↗2015-05-12
▶

💬Community

1
Bugzilla
CVE-2015-2715 Mozilla: Use-after-free due to Media Decoder Thread creation during shutdown (MFSA 2015-53)↗2015-05-12
▶