CVE-2015-2713

Severity

68%

Complexity

86%

Confidentiality

106%

CWE-416: Use After Free

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.

CWE-416: Use After Free

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

First reported 10 years ago

2015-05-14 10:59:00

Last updated 6 years ago

2018-10-30 16:27:00

Affected Software

Novell SUSE Linux Enterprise Desktop 12.0

12.0

Novell SUSE Linux Enterprise Server 12.0

12.0

OpenSUSE 13.1

13.1

OpenSUSE 13.2

13.2

Mozilla Firefox

Mozilla Thunderbird

Mozilla Firefox Extended Support Release (ESR) 31.0

31.0

Mozilla Firefox Extended Support Release (ESR) 31.1

31.1

Mozilla Firefox Extended Support Release (ESR) 31.1.0

31.1.0

Mozilla Firefox Extended Support Release (ESR) 31.1.1

31.1.1

Mozilla Firefox Extended Support Release (ESR) 31.2

31.2

Mozilla Firefox Extended Support Release (ESR) 31.3

31.3

Mozilla Firefox Extended Support Release (ESR) 31.3.0

31.3.0

Mozilla Firefox Extended Support Release (ESR) 31.4

31.4

Mozilla Firefox Extended Support Release (ESR) 31.5

31.5

Mozilla Firefox Extended Support Release (ESR) 31.5.1

31.5.1

Mozilla Firefox Extended Support Release (ESR) 31.5.2

31.5.2

Mozilla Firefox Extended Support Release (ESR) 31.5.3

31.5.3

References

openSUSE-SU-2015:0892

SUSE-SU-2015:0960

SUSE-SU-2015:0978

openSUSE-SU-2015:1266

openSUSE-SU-2015:0934

RHSA-2015:0988

RHSA-2015:1012

DSA-3260

DSA-3264

http://www.mozilla.org/security/announce/2015/mfsa2015-51.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

74611

USN-2602-1

USN-2603-1

https://bugzilla.mozilla.org/show_bug.cgi?id=1153478

GLSA-201605-06

https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.