CVE-2015-4522

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
mozillafirefox
38.0
mozillafirefox
38.0.1
mozillafirefox
38.0.5
mozillafirefox
38.1.0
mozillafirefox
38.1.1
mozillafirefox
38.2.0
mozillafirefox
38.2.1
mozillafirefox
𝑥
≤ 40.0.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
vivid
Fixed 41.0+build3-0ubuntu0.15.04.1
released
trusty
Fixed 41.0+build3-0ubuntu0.14.04.1
released
precise
Fixed 41.0+build3-0ubuntu0.12.04.1
released
thunderbird
vivid
Fixed 1:38.3.0+build1-0ubuntu0.15.04.1
released
trusty
Fixed 1:38.3.0+build1-0ubuntu0.14.04.1
released
precise
Fixed 1:38.3.0+build1-0ubuntu0.12.04.1
released
References