NetSight
IP …
medium6.8

CVE-2015-7196

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect gar…

Impact

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.

Affected products

VendorProductAffected versions
MozillaFirefox
through 41.0.2
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1

Weakness classification

CWE-17

References