CVE-2015-4484 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer12 documents7 sources
Severity
5.0MEDIUMNVD
OSV10.0
EPSS
0.8%
top 25.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Mozilla FirefoxCanonical Ubuntu LinuxOpensuse+1 more
Timeline
PublishedAug 16
Latest updateMay 14

Description

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of shared memory and accessing (1) an Atomics object or (2) a SharedArrayBuffer object.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages4 packages

▶Ubuntumozilla/firefox< 40.0+build4-0ubuntu0.14.04.1+1
▶NVDmozilla/firefox39.0.3+4
▶NVDoracle/solaris11.3
▶NVDopensuse/opensuse13.1, 13.2+1

Also affects: Ubuntu Linux 12.04, 14.04, 15.04

🔴Vulnerability Details

6
GHSA
GHSA-c78v-3pfm-39g8: The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40↗2022-05-14
▶
OSV
firefox regression↗2015-08-20
▶
CVEList
CVE-2015-4484: The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40↗2015-08-16
▶
OSV
firefox vulnerabilities↗2015-08-11
▶
OSV
ubufox update↗2015-08-11
▶

📋Vendor Advisories

4
Ubuntu
Firefox regression↗2015-08-20
▶
Ubuntu
Firefox vulnerabilities↗2015-08-11
▶
Ubuntu
Ubufox update↗2015-08-11
▶
Red Hat
Mozilla: Crash when using shared memory in JavaScript (MFSA 2015-87)↗2015-08-11
▶

💬Community

1
Bugzilla
CVE-2015-4484 Mozilla: Crash when using shared memory in JavaScript (MFSA 2015-87)↗2015-08-11
▶
CVE-2015-4484 — Mozilla Firefox vulnerability | cvebase