Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2015-0828

Disclosure Date: February 25, 2015
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Vendors

  • mozilla,
  • opensuse,
  • oracle

Products

  • firefox,
  • firefox 0.1,
  • firefox 0.10,
  • firefox 0.10.1,
  • firefox 0.2,
  • firefox 0.3,
  • firefox 0.4,
  • firefox 0.5,
  • firefox 0.6,
  • firefox 0.6.1,
  • firefox 0.7,
  • firefox 0.7.1,
  • firefox 0.8,
  • firefox 0.9,
  • firefox 0.9.1,
  • firefox 0.9.2,
  • firefox 0.9.3,
  • firefox 1.0,
  • firefox 1.0.1,
  • firefox 1.0.2,
  • firefox 1.0.3,
  • firefox 1.0.4,
  • firefox 1.0.5,
  • firefox 1.0.6,
  • firefox 1.0.7,
  • firefox 1.0.8,
  • firefox 1.4.1,
  • firefox 1.5,
  • firefox 1.5.0.1,
  • firefox 1.5.0.10,
  • firefox 1.5.0.11,
  • firefox 1.5.0.12,
  • firefox 1.5.0.2,
  • firefox 1.5.0.3,
  • firefox 1.5.0.4,
  • firefox 1.5.0.5,
  • firefox 1.5.0.6,
  • firefox 1.5.0.7,
  • firefox 1.5.0.8,
  • firefox 1.5.0.9,
  • firefox 1.5.1,
  • firefox 1.5.2,
  • firefox 1.5.3,
  • firefox 1.5.4,
  • firefox 1.5.5,
  • firefox 1.5.6,
  • firefox 1.5.7,
  • firefox 1.5.8,
  • firefox 1.8,
  • firefox 10.0,
  • firefox 10.0.1,
  • firefox 10.0.10,
  • firefox 10.0.11,
  • firefox 10.0.12,
  • firefox 10.0.2,
  • firefox 10.0.3,
  • firefox 10.0.4,
  • firefox 10.0.5,
  • firefox 10.0.6,
  • firefox 10.0.7,
  • firefox 10.0.8,
  • firefox 10.0.9,
  • firefox 11.0,
  • firefox 12.0,
  • firefox 13.0,
  • firefox 13.0.1,
  • firefox 14.0,
  • firefox 14.0.1,
  • firefox 15.0,
  • firefox 15.0.1,
  • firefox 16.0,
  • firefox 16.0.1,
  • firefox 16.0.2,
  • firefox 17.0,
  • firefox 17.0.1,
  • firefox 17.0.10,
  • firefox 17.0.11,
  • firefox 17.0.2,
  • firefox 17.0.3,
  • firefox 17.0.4,
  • firefox 17.0.5,
  • firefox 17.0.6,
  • firefox 17.0.7,
  • firefox 17.0.8,
  • firefox 17.0.9,
  • firefox 18.0,
  • firefox 18.0.1,
  • firefox 18.0.2,
  • firefox 19.0,
  • firefox 19.0.1,
  • firefox 19.0.2,
  • firefox 2.0,
  • firefox 2.0.0.1,
  • firefox 2.0.0.10,
  • firefox 2.0.0.11,
  • firefox 2.0.0.12,
  • firefox 2.0.0.13,
  • firefox 2.0.0.14,
  • firefox 2.0.0.15,
  • firefox 2.0.0.16,
  • firefox 2.0.0.17,
  • firefox 2.0.0.18,
  • firefox 2.0.0.19,
  • firefox 2.0.0.2,
  • firefox 2.0.0.20,
  • firefox 2.0.0.3,
  • firefox 2.0.0.4,
  • firefox 2.0.0.5,
  • firefox 2.0.0.6,
  • firefox 2.0.0.7,
  • firefox 2.0.0.8,
  • firefox 2.0.0.9,
  • firefox 20.0,
  • firefox 20.0.1,
  • firefox 21.0,
  • firefox 22.0,
  • firefox 23.0,
  • firefox 23.0.1,
  • firefox 24.0,
  • firefox 24.1,
  • firefox 24.1.1,
  • firefox 25.0,
  • firefox 25.0.1,
  • firefox 26.0,
  • firefox 27.0,
  • firefox 27.0.1,
  • firefox 28.0,
  • firefox 29.0,
  • firefox 29.0.1,
  • firefox 3.0,
  • firefox 3.0.1,
  • firefox 3.0.10,
  • firefox 3.0.11,
  • firefox 3.0.12,
  • firefox 3.0.13,
  • firefox 3.0.14,
  • firefox 3.0.15,
  • firefox 3.0.16,
  • firefox 3.0.17,
  • firefox 3.0.18,
  • firefox 3.0.19,
  • firefox 3.0.2,
  • firefox 3.0.3,
  • firefox 3.0.4,
  • firefox 3.0.5,
  • firefox 3.0.6,
  • firefox 3.0.7,
  • firefox 3.0.8,
  • firefox 3.0.9,
  • firefox 3.5,
  • firefox 3.5.1,
  • firefox 3.5.10,
  • firefox 3.5.11,
  • firefox 3.5.12,
  • firefox 3.5.13,
  • firefox 3.5.14,
  • firefox 3.5.15,
  • firefox 3.5.16,
  • firefox 3.5.17,
  • firefox 3.5.18,
  • firefox 3.5.19,
  • firefox 3.5.2,
  • firefox 3.5.3,
  • firefox 3.5.4,
  • firefox 3.5.5,
  • firefox 3.5.6,
  • firefox 3.5.7,
  • firefox 3.5.8,
  • firefox 3.5.9,
  • firefox 3.6,
  • firefox 3.6.10,
  • firefox 3.6.11,
  • firefox 3.6.12,
  • firefox 3.6.13,
  • firefox 3.6.14,
  • firefox 3.6.15,
  • firefox 3.6.16,
  • firefox 3.6.17,
  • firefox 3.6.18,
  • firefox 3.6.19,
  • firefox 3.6.2,
  • firefox 3.6.20,
  • firefox 3.6.21,
  • firefox 3.6.22,
  • firefox 3.6.23,
  • firefox 3.6.24,
  • firefox 3.6.25,
  • firefox 3.6.26,
  • firefox 3.6.27,
  • firefox 3.6.28,
  • firefox 3.6.3,
  • firefox 3.6.4,
  • firefox 3.6.6,
  • firefox 3.6.7,
  • firefox 3.6.8,
  • firefox 3.6.9,
  • firefox 30.0,
  • firefox 31.0,
  • firefox 31.1.0,
  • firefox 32.0,
  • firefox 33.0,
  • firefox 34.0.5,
  • firefox 4.0,
  • firefox 4.0.1,
  • firefox 5.0,
  • firefox 5.0.1,
  • firefox 6.0,
  • firefox 6.0.1,
  • firefox 6.0.2,
  • firefox 7.0,
  • firefox 7.0.1,
  • firefox 8.0,
  • firefox 8.0.1,
  • firefox 9.0,
  • firefox 9.0.1,
  • opensuse 13.1,
  • opensuse 13.2,
  • solaris 11.3
Technical Analysis