QwikSec

Security Database

CVE

CWE

Training

CVE-2015-4492

Published: Aug 16, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

SUSE-SU-2015:2081

vendor-advisory

x_refsource_SUSE

http://www.mozilla.org/security/announce/2015/mfsa2015-92.html

x_refsource_CONFIRM

openSUSE-SU-2015:1454

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2015:1389

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2015:1453

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

x_refsource_CONFIRM

SUSE-SU-2015:1528

vendor-advisory

x_refsource_SUSE

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_GENTOO

SUSE-SU-2015:1449

vendor-advisory

x_refsource_SUSE

https://bugzilla.mozilla.org/show_bug.cgi?id=1185820

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

openSUSE-SU-2015:1390

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.