CVE-2015-0831

MOYENNE 6.8CVE-2015-0831 · Published 25/02/2015 · updated 17/06/2026

En bref

CVE-2015-0831 est une vulnérabilité MOYENNE (CVSS 6.8) touchant firefox (mozilla), firefox esr (mozilla), thunderbird (mozilla).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.8%, plus élevée que 90.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
firefox mozilla	`= 0.1= 0.10= 0.10.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.6.1= 0.7= 0.7.1= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.4.1= 1.5= 1.5.0.1= 1.5.0.10= 1.5.0.11= 1.5.0.12= 1.5.0.2= 1.5.0.3= 1.5.0.4= 1.5.0.5= 1.5.0.6= 1.5.0.7= 1.5.0.8= 1.5.0.9= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.8= 10.0= 10.0.1= 10.0.10= 10.0.11= 10.0.12= 10.0.2= 10.0.3= 10.0.4= 10.0.5= 10.0.6= 10.0.7= 10.0.8= 10.0.9= 11.0= 12.0= 13.0= 13.0.1= 14.0= 14.0.1= 15.0= 15.0.1= 16.0= 16.0.1= 16.0.2= 17.0= 17.0.1= 17.0.10= 17.0.11= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6= 17.0.7= 17.0.8= 17.0.9= 18.0= 18.0.1= 18.0.2= 19.0= 19.0.1= 19.0.2= 2.0= 2.0.0.1= 2.0.0.10= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.15= 2.0.0.16= 2.0.0.17= 2.0.0.18= 2.0.0.19= 2.0.0.2= 2.0.0.20= 2.0.0.3= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.7= 2.0.0.8= 2.0.0.9= 20.0= 20.0.1= 21.0= 22.0= 23.0= 23.0.1= 24.0= 24.1= 24.1.1= 25.0= 25.0.1= 26.0= 27.0= 27.0.1= 28.0= 29.0= 29.0.1= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.5= 3.5.1= 3.5.10= 3.5.11= 3.5.12= 3.5.13= 3.5.14= 3.5.15= 3.5.16= 3.5.17= 3.5.18= 3.5.19= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9= 3.6= 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.14= 3.6.15= 3.6.16= 3.6.17= 3.6.18= 3.6.19= 3.6.2= 3.6.20= 3.6.21= 3.6.22= 3.6.23= 3.6.24= 3.6.25= 3.6.26= 3.6.27= 3.6.28= 3.6.3= 3.6.4= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 30.0= 31.0= 31.1.0= 31.1.1= 32.0= 33.0= 34.0.5= 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1= 8.0= 8.0.1= 9.0= 9.0.1≤ 35.0.1`	No fix yet
firefox esr mozilla	`= 31.1= 31.2= 31.3= 31.4= 31.5`	No fix yet
thunderbird mozilla	`= 31.0= 31.1.2= 31.2= 31.3≤ 31.4`	No fix yet

Description

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

References

lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
lists.opensuse.org/opensuse-updates/2015-03/msg00067.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-0265.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-0266.html

Autres vulnérabilités de firefox

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

En bref

CVE-2015-0831 est une vulnérabilité MOYENNE (CVSS 6.8) touchant firefox (mozilla), firefox esr (mozilla), thunderbird (mozilla).

Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.8%, plus élevée que 90.1% des vulnérabilités.

Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package

Affected versions

Patched versions

firefox

mozilla

= 0.1= 0.10= 0.10.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.6.1= 0.7= 0.7.1= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.4.1= 1.5= 1.5.0.1= 1.5.0.10= 1.5.0.11= 1.5.0.12= 1.5.0.2= 1.5.0.3= 1.5.0.4= 1.5.0.5= 1.5.0.6= 1.5.0.7= 1.5.0.8= 1.5.0.9= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.8= 10.0= 10.0.1= 10.0.10= 10.0.11= 10.0.12= 10.0.2= 10.0.3= 10.0.4= 10.0.5= 10.0.6= 10.0.7= 10.0.8= 10.0.9= 11.0= 12.0= 13.0= 13.0.1= 14.0= 14.0.1= 15.0= 15.0.1= 16.0= 16.0.1= 16.0.2= 17.0= 17.0.1= 17.0.10= 17.0.11= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6= 17.0.7= 17.0.8= 17.0.9= 18.0= 18.0.1= 18.0.2= 19.0= 19.0.1= 19.0.2= 2.0= 2.0.0.1= 2.0.0.10= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.15= 2.0.0.16= 2.0.0.17= 2.0.0.18= 2.0.0.19= 2.0.0.2= 2.0.0.20= 2.0.0.3= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.7= 2.0.0.8= 2.0.0.9= 20.0= 20.0.1= 21.0= 22.0= 23.0= 23.0.1= 24.0= 24.1= 24.1.1= 25.0= 25.0.1= 26.0= 27.0= 27.0.1= 28.0= 29.0= 29.0.1= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.5= 3.5.1= 3.5.10= 3.5.11= 3.5.12= 3.5.13= 3.5.14= 3.5.15= 3.5.16= 3.5.17= 3.5.18= 3.5.19= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9= 3.6= 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.14= 3.6.15= 3.6.16= 3.6.17= 3.6.18= 3.6.19= 3.6.2= 3.6.20= 3.6.21= 3.6.22= 3.6.23= 3.6.24= 3.6.25= 3.6.26= 3.6.27= 3.6.28= 3.6.3= 3.6.4= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 30.0= 31.0= 31.1.0= 31.1.1= 32.0= 33.0= 34.0.5= 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1= 8.0= 8.0.1= 9.0= 9.0.1≤ 35.0.1

No fix yet

firefox esr

mozilla

= 31.1= 31.2= 31.3= 31.4= 31.5

No fix yet

thunderbird

mozilla

= 31.0= 31.1.2= 31.2= 31.3≤ 31.4

No fix yet

Description

Autres vulnérabilités de firefox

Tout voir →