Summary
Robert Kaiser discovered a use-after-free during plugin initialization in
some circumstances. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to cause a
denial of service via application crash or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2015-2706)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 37.0.2+build1-0ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —
Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote …
References
-
report
https://ubuntu.com/security/CVE-2015-2706