NetSight
IP …
high7.5

CVE-2015-4492

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote atta…

Impact

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.

Affected products

VendorProductAffected versions
OracleSolaris
Version 11.3
MozillaFirefox
through 39.0.3
Versions 38.0, 38.0.1, 38.0.5, 38.1.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
OpensuseOpensuse
Versions 13.1, 13.2

References