Information disclosure in Apple macOS

CVE-2015-2742

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.

Vulnerability class: Information Disclosure

EPSS: 0.017 (75.0th percentile) — read the EPSS interpretation.

Affected products

Apple Macos
Mozilla Firefox
Oracle Solaris — versions 11.3
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@mozilla.org (vendor-advisory, x_refsource_GENTOO)
security@mozilla.org (vdb-entry, x_refsource_BID)
security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
security@mozilla.org (x_refsource_CONFIRM, Third Party Advisory)
security@mozilla.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
security@mozilla.org (vdb-entry, x_refsource_SECTRACK)
security@mozilla.org (x_refsource_CONFIRM, Third Party Advisory)