NetSight
IP …
medium6.8

CVE-2015-2713

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote …

Impact

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.

Affected products

VendorProductAffected versions
NovellSuse Linux Enterprise Software Development Kit
Version 12.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Server
Version 12.0
OpensuseOpensuse
Versions 13.1, 13.2
MozillaFirefox
through 37.0.2
Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1
MozillaThunderbird
through 31.5
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0

References