CVE-2015-0831

Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)

Published Feb 25, 2015 CVSS 2.0 · 6.8 Medium EPSS 3.8% KEV · Not listed
Description
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3174-1 iceweasel security update
Debian DSA Debian DSA DSA-3179-1 icedove security update
EUVD EUVD EUVD-2015-0844 Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
Ubuntu USN Ubuntu USN USN-2505-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2506-1 Thunderbird vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:31.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 4:26 AM
Reserved
Jan 7, 2015, 12:00 AM
Status
Modified
Published
Feb 25, 2015, 11:59 AM
Modified
Jun 17, 2026, 12:20 AM
Severity
Critical
Public date
Feb 24, 2015, 12:00 AM