CVE-2015-4474 — Out-of-bounds Write in Mozilla Firefox

12 documents6 sources
Severity
10.0CRITICALNVD
OSV7.5
EPSS
2.2%
top 15.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Freedesktop PopplerMozilla FirefoxCanonical Ubuntu Linux+1 more
Timeline
PublishedAug 16
Latest updateMay 14

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶Ubuntumozilla/firefox< 40.0+build4-0ubuntu0.14.04.1+1
▶NVDmozilla/firefox39.0.3
▶Ubuntufreedesktop/poppler< 0.24.5-2ubuntu4.4
▶NVDopensuse/opensuse13.1, 13.2+1

Also affects: Ubuntu Linux 12.04, 14.04, 15.04

🔴Vulnerability Details

6
GHSA
GHSA-jqfp-v42r-59vm: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40↗2022-05-14
▶
OSV
poppler vulnerabilities↗2016-05-02
▶
OSV
firefox regression↗2015-08-20
▶
OSV
firefox vulnerabilities↗2015-08-11
▶
OSV
CVE-2015-4474: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40↗2015-08-11
▶

📋Vendor Advisories

4
Ubuntu
Firefox regression↗2015-08-20
▶
Ubuntu
Firefox vulnerabilities↗2015-08-11
▶
Ubuntu
Ubufox update↗2015-08-11
▶
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:40.0) (MFSA 2015-79)↗2015-08-11
▶

💬Community

1
Bugzilla
CVE-2015-4474 Mozilla: Miscellaneous memory safety hazards (rv:40.0) (MFSA 2015-79)↗2015-08-11
▶