Vulnerability in Mozilla Firefox
CVE-2015-0823
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.039 (89.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 90th percentile — 89.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.039 · newest: 0.039 · change: 0.000
Affected products
- Mozilla Firefox — versions 0.1, 0.2, 0.3
- Opentype Sanitiser Project
- Canonical Ubuntu Linux — versions 12.04, 14.04, 14.10
- openSUSE — versions 13.1, 13.2
References
- security.gentoo.org/glsa/201504-01 (vendor-advisory)
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html (vendor-advisory, Third Party Advisory)
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- bugzilla.mozilla.org/show_bug.cgi (Issue Tracking)
- www.securityfocus.com/bid/72754 (VDB Entry, Third Party Advisory, vdb-entry)
- github.com/khaledhosny/ots/commit/003c62d28ae438aa8943cb31535563397f838a2c (Patch, Issue Tracking)
- www.securitytracker.com/id/1031791 (VDB Entry, Third Party Advisory, vdb-entry)
- www.mozilla.org/security/announce/2015/mfsa2015-23.html (Vendor Advisory)
- lists.opensuse.org/opensuse-updates/2015-03/msg00067.html (vendor-advisory, Third Party Advisory)
- www.ubuntu.com/usn/USN-2505-1 (vendor-advisory, Third Party Advisory)