CVE-2015-2728

CVE Details

Release Date:	2015-07-02
Impact:	Moderate	What is this?

Description

The IndexedDatabaseManager class in the IndexedDB implementation inMozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a type

See more information about CVE-2015-2728 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	5.1
Vector String:	AV:N/AC:H/Au:N/C:P/I:P/A:P
Version:	2.0
Attack Vector:	Network
Attack Complexity:	High
Authentication:	None
Confidentiality Impact:	Partial
Integrity Impact:	Partial
Availability Impact:	Partial

Errata information

Platform	Errata	Release Date
Oracle Linux version 5 (firefox)	ELSA-2015-1207	2015-07-03
Oracle Linux version 6 (firefox)	ELSA-2015-1207	2015-07-03
Oracle Linux version 7 (firefox)	ELSA-2015-1207	2015-07-03