CVE-2015-0831

Severity

68%

Complexity

86%

Confidentiality

106%

CWE-416: Use After Free

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

CWE-416: Use After Free

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

First reported 9 years ago

2015-02-25 11:59:00

Last updated 5 years ago

2019-04-22 17:48:00

Affected Software

Mozilla Thunderbird 31.0

31.0

Mozilla Thunderbird 31.1.2

31.1.2

Mozilla Thunderbird

Mozilla Firefox 0.1

0.1

Mozilla Firefox 0.2

0.2

Mozilla Firefox 0.3

0.3

Mozilla Firefox 0.4

0.4

Mozilla Firefox 0.5

0.5

Mozilla Firefox 0.6

0.6

Mozilla Firefox 0.6.1

0.6.1

Mozilla Firefox 0.7

0.7

Mozilla Firefox 0.7.1

0.7.1

Mozilla Firefox 0.8

0.8

Mozilla Firefox 0.9

0.9

Mozilla Firefox 0.9 rc

0.9

Mozilla Firefox 0.9.1

0.9.1

Mozilla Firefox 0.9.2

0.9.2

Mozilla Firefox 0.9.3

0.9.3

Mozilla Firefox 0.10

0.10

Mozilla Firefox 0.10.1

0.10.1

Mozilla Firefox 1.0

1.0

Mozilla Firefox 1.0 Preview Release

1.0

Mozilla Firefox 1.0.1

1.0.1

Mozilla Firefox 1.0.2

1.0.2

Mozilla Firefox 1.0.3

1.0.3

Mozilla Firefox 1.0.4

1.0.4

Mozilla Firefox 1.0.5

1.0.5

Mozilla Firefox 1.0.6

1.0.6

Mozilla Firefox 1.0.7

1.0.7

Mozilla Firefox 1.0.8

1.0.8

Mozilla Firefox 1.4.1

1.4.1

Mozilla Firefox 1.5

1.5

Mozilla Firefox 1.5 Beta 1

1.5

Mozilla Firefox 1.5 Beta 2

1.5

Mozilla Firefox 1.5.0.1

1.5.0.1

Mozilla Firefox 1.5.0.2

1.5.0.2

Mozilla Firefox 1.5.0.3

1.5.0.3

Mozilla Firefox 1.5.0.4

1.5.0.4

Mozilla Firefox 1.5.0.5

1.5.0.5

Mozilla Firefox 1.5.0.6

1.5.0.6

Mozilla Firefox 1.5.0.7

1.5.0.7

Mozilla Firefox 1.5.0.8

1.5.0.8

Mozilla Firefox 1.5.0.9

1.5.0.9

Mozilla Firefox 1.5.0.10

1.5.0.10

Mozilla Firefox 1.5.0.11

1.5.0.11

Mozilla Firefox 1.5.0.12

1.5.0.12

Mozilla Firefox 1.5.1

1.5.1

Mozilla Firefox 1.5.2

1.5.2

Mozilla Firefox 1.5.3

1.5.3

Mozilla Firefox 1.5.4

1.5.4

Mozilla Firefox 1.5.5

1.5.5

Mozilla Firefox 1.5.6

1.5.6

Mozilla Firefox 1.5.7

1.5.7

Mozilla Firefox 1.5.8

1.5.8

Mozilla Firefox 1.8

1.8

Mozilla Firefox 2.0

2.0

Mozilla Firefox 2.0.0.1

2.0.0.1

Mozilla Firefox 2.0.0.2

2.0.0.2

Mozilla Firefox 2.0.0.3

2.0.0.3

Mozilla Firefox 2.0.0.4

2.0.0.4

Mozilla Firefox 2.0.0.5

2.0.0.5

Mozilla Firefox 2.0.0.6

2.0.0.6

Mozilla Firefox 2.0.0.7

2.0.0.7

Mozilla Firefox 2.0.0.8

2.0.0.8

Mozilla Firefox 2.0.0.9

2.0.0.9

Mozilla Firefox 2.0.0.10

2.0.0.10

Mozilla Firefox 2.0.0.11

2.0.0.11

Mozilla Firefox 2.0.0.12

2.0.0.12

Mozilla Firefox 2.0.0.13

2.0.0.13

Mozilla Firefox 2.0.0.14

2.0.0.14

Mozilla Firefox 2.0.0.15

2.0.0.15

Mozilla Firefox 2.0.0.16

2.0.0.16

Mozilla Firefox 2.0.0.17

2.0.0.17

Mozilla Firefox 2.0.0.18

2.0.0.18

Mozilla Firefox 2.0.0.19

2.0.0.19

Mozilla Firefox 2.0.0.20

2.0.0.20

Mozilla Firefox 3.0

3.0

Mozilla Firefox 3.0.1

3.0.1

Mozilla Firefox 3.0.2

3.0.2

Mozilla Firefox 3.0.3

3.0.3

Mozilla Firefox 3.0.4

3.0.4

Mozilla Firefox 3.0.5

3.0.5

Mozilla Firefox 3.0.6

3.0.6

Mozilla Firefox 3.0.7

3.0.7

Mozilla Firefox 3.0.8

3.0.8

Mozilla Firefox 3.0.9

3.0.9

Mozilla Firefox 3.0.10

3.0.10

Mozilla Firefox 3.0.11

3.0.11

Mozilla Firefox 3.0.12

3.0.12

Mozilla Firefox 3.0.13

3.0.13

Mozilla Firefox 3.0.14

3.0.14

Mozilla Firefox 3.0.15

3.0.15

Mozilla Firefox 3.0.16

3.0.16

Mozilla Firefox 3.0.17

3.0.17

Mozilla Firefox 3.0.18

3.0.18

Mozilla Firefox 3.0.19

3.0.19

Mozilla Firefox 3.5

3.5

Mozilla Firefox 3.5.1

3.5.1

Mozilla Firefox 3.5.2

3.5.2

Mozilla Firefox 3.5.3

3.5.3

Mozilla Firefox 3.5.4

3.5.4

Mozilla Firefox 3.5.5

3.5.5

Mozilla Firefox 3.5.6

3.5.6

Mozilla Firefox 3.5.7

3.5.7

Mozilla Firefox 3.5.8

3.5.8

Mozilla Firefox 3.5.9

3.5.9

Mozilla Firefox 3.5.10

3.5.10

Mozilla Firefox 3.5.11

3.5.11

Mozilla Firefox 3.5.12

3.5.12

Mozilla Firefox 3.5.13

3.5.13

Mozilla Firefox 3.5.14

3.5.14

Mozilla Firefox 3.5.15

3.5.15

Mozilla Firefox 3.5.16

3.5.16

Mozilla Firefox 3.5.17

3.5.17

Mozilla Firefox 3.5.18

3.5.18

Mozilla Firefox 3.5.19

3.5.19

Mozilla Firefox 3.6

3.6

Mozilla Firefox 3.6.2

3.6.2

Mozilla Firefox 3.6.3

3.6.3

Mozilla Firefox 3.6.4

3.6.4

Mozilla Firefox 3.6.6

3.6.6

Mozilla Firefox 3.6.7

3.6.7

Mozilla Firefox 3.6.8

3.6.8

Mozilla Firefox 3.6.9

3.6.9

Mozilla Firefox 3.6.10

3.6.10

Mozilla Firefox 3.6.11

3.6.11

Mozilla Firefox 3.6.12

3.6.12

Mozilla Firefox 3.6.13

3.6.13

Mozilla Firefox 3.6.14

3.6.14

Mozilla Firefox 3.6.15

3.6.15

Mozilla Firefox 3.6.16

3.6.16

Mozilla Firefox 3.6.17

3.6.17

Mozilla Firefox 3.6.18

3.6.18

Mozilla Firefox 3.6.19

3.6.19

Mozilla Firefox 3.6.20

3.6.20

Mozilla Firefox 3.6.21

3.6.21

Mozilla Firefox 3.6.22

3.6.22

Mozilla Firefox 3.6.23

3.6.23

Mozilla Firefox 3.6.24

3.6.24

Mozilla Firefox 3.6.25

3.6.25

Mozilla Firefox 3.6.26

3.6.26

Mozilla Firefox 3.6.27

3.6.27

Mozilla Firefox 3.6.28

3.6.28

Mozilla Firefox 4.0

4.0

Mozilla Firefox 4.0 beta1

4.0

Mozilla Firefox 4.0 beta10

4.0

Mozilla Firefox 4.0 beta11

4.0

Mozilla Firefox 4.0 beta12

4.0

Mozilla Firefox 4.0 beta2

4.0

Mozilla Firefox 4.0 beta3

4.0

Mozilla Firefox 4.0 beta4

4.0

Mozilla Firefox 4.0 beta5

4.0

Mozilla Firefox 4.0 beta6

4.0

Mozilla Firefox 4.0 beta7

4.0

Mozilla Firefox 4.0 beta8

4.0

Mozilla Firefox 4.0 beta9

4.0

Mozilla Firefox 4.0.1

4.0.1

Mozilla Firefox 5.0

5.0

Mozilla Firefox 5.0.1

5.0.1

Mozilla Firefox 6.0

6.0

Mozilla Firefox 6.0.1

6.0.1

Mozilla Firefox 6.0.2

6.0.2

Mozilla Firefox 7.0

7.0

Mozilla Firefox 7.0.1

7.0.1

Mozilla Firefox 8.0

8.0

Mozilla Firefox 8.0.1

8.0.1

Mozilla Firefox 9.0

9.0

Mozilla Firefox 9.0.1

9.0.1

Mozilla Firefox 10.0

10.0

Mozilla Firefox 10.0.1

10.0.1

Mozilla Firefox 10.0.2

10.0.2

Mozilla Firefox 10.0.3

10.0.3

Mozilla Firefox 10.0.4

10.0.4

Mozilla Firefox 10.0.5

10.0.5

Mozilla Firefox 10.0.6

10.0.6

Mozilla Firefox 10.0.7

10.0.7

Mozilla Firefox 10.0.8

10.0.8

Mozilla Firefox 10.0.9

10.0.9

Mozilla Firefox 10.0.10

10.0.10

Mozilla Firefox 10.0.11

10.0.11

Mozilla Firefox 10.0.12

10.0.12

Mozilla Firefox 11.0

11.0

Mozilla Firefox 12.0

12.0

Mozilla Firefox 12.0 beta6

12.0

Mozilla Firefox 13.0

13.0

Mozilla Firefox 13.0.1

13.0.1

Mozilla Firefox 14.0

14.0

Mozilla Firefox 14.0.1

14.0.1

Mozilla Firefox 15.0

15.0

Mozilla Firefox 15.0.1

15.0.1

Mozilla Firefox 16.0

16.0

Mozilla Firefox 16.0.1

16.0.1

Mozilla Firefox 16.0.2

16.0.2

Mozilla Firefox 17.0

17.0

Mozilla Firefox 17.0.1

17.0.1

Mozilla Firefox 17.0.2

17.0.2

Mozilla Firefox 17.0.3

17.0.3

Mozilla Firefox 17.0.4

17.0.4

Mozilla Firefox 17.0.5

17.0.5

Mozilla Firefox 17.0.6

17.0.6

Mozilla Firefox 17.0.7

17.0.7

Mozilla Firefox 17.0.8

17.0.8

Mozilla Firefox 17.0.9

17.0.9

Mozilla Firefox 17.0.10

17.0.10

Mozilla Firefox 17.0.11

17.0.11

Mozilla Firefox 18.0

18.0

Mozilla Firefox 18.0.1

18.0.1

Mozilla Firefox 18.0.2

18.0.2

Mozilla Firefox 19.0

19.0

Mozilla Firefox 19.0.1

19.0.1

Mozilla Firefox 19.0.2

19.0.2

Mozilla Firefox 20.0

20.0

Mozilla Firefox 20.0.1

20.0.1

Mozilla Firefox 21.0

21.0

Mozilla Firefox 22.0

22.0

Mozilla Firefox 23.0

23.0

Mozilla Firefox 23.0.1

23.0.1

Mozilla Firefox 24.0

24.0

Mozilla Firefox 24.1

24.1

Mozilla Firefox 24.1.1

24.1.1

Mozilla Firefox 25.0

25.0

Mozilla Firefox 25.0.1

25.0.1

Mozilla Firefox 26.0

26.0

Mozilla Firefox 27.0

27.0

Mozilla Firefox 27.0.1

27.0.1

Mozilla Firefox 28.0

28.0

Mozilla Firefox 29.0

29.0

Mozilla Firefox 29.0.1

29.0.1

Mozilla Firefox 30.0

30.0

Mozilla Firefox 31.0

31.0

Mozilla Firefox 31.1.0

31.1.0

Mozilla Firefox 32.0

32.0

Mozilla Firefox 33.0

33.0

Mozilla Firefox 34.0.5

34.0.5

Mozilla Firefox

Mozilla Firefox Extended Support Release (ESR) 31.0

31.0

Mozilla Firefox Extended Support Release (ESR) 31.1

31.1

Mozilla Firefox Extended Support Release (ESR) 31.1.1

31.1.1

Mozilla Firefox Extended Support Release (ESR) 31.2

31.2

Mozilla Firefox Extended Support Release (ESR) 31.3

31.3

Mozilla Firefox Extended Support Release (ESR) 31.4

31.4

Mozilla Firefox Extended Support Release (ESR) 31.5

31.5

Canonical Ubuntu Linux 12.04 LTS

12.04

Canonical Ubuntu Linux 14.04 LTS (Long-Term Support)

14.04

Canonical Ubuntu Linux 14.10

14.10

Red Hat Enterprise Linux 5

5

Red Hat Enterprise Linux 6.0

6.0

References

openSUSE-SU-2015:0404

Third Party Advisory

SUSE-SU-2015:0412

Third Party Advisory

SUSE-SU-2015:0446

Third Party Advisory

SUSE-SU-2015:0447

Third Party Advisory

openSUSE-SU-2015:0448

Third Party Advisory

openSUSE-SU-2015:0567

Third Party Advisory

openSUSE-SU-2015:1266

openSUSE-SU-2015:0570

Third Party Advisory

RHSA-2015:0265

Third Party Advisory

RHSA-2015:0266

Third Party Advisory

RHSA-2015:0642

Third Party Advisory

DSA-3174

Third Party Advisory

DSA-3179

Third Party Advisory

http://www.mozilla.org/security/announce/2015/mfsa2015-16.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Third Party Advisory

72746

Third Party Advisory, VDB Entry

1031791

Third Party Advisory, VDB Entry

1031792

Third Party Advisory, VDB Entry

USN-2505-1

Third Party Advisory

USN-2506-1

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1130541

Issue Tracking

GLSA-201504-01

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.