CVE-2015-2728
06.07.2015, 02:00
The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.Enginsight
| Vendor | Product | Version |
|---|---|---|
| novell | suse_linux_enterprise_desktop | 12.0 |
| novell | suse_linux_enterprise_server | 12.0 |
| mozilla | firefox | 31.0 |
| mozilla | firefox | 31.1.0 |
| mozilla | firefox | 31.1.1 |
| mozilla | firefox | 31.3.0 |
| mozilla | firefox | 31.5.1 |
| mozilla | firefox | 31.5.2 |
| mozilla | firefox | 31.5.3 |
| mozilla | firefox | 38.0 |
| mozilla | firefox_esr | 31.1 |
| mozilla | firefox_esr | 31.2 |
| mozilla | firefox_esr | 31.3 |
| mozilla | firefox_esr | 31.4 |
| mozilla | firefox_esr | 31.5 |
| mozilla | firefox_esr | 31.6.0 |
| mozilla | firefox_esr | 31.7.0 |
| mozilla | firefox | 𝑥 ≤ 38.1.0 |
| oracle | solaris | 11.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References