CVE-2015-2722
HighSummary
A use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data theft.
Recommendation
It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability.
Other vulnerabilities in Mozilla Firefox
See all- CVE-2016-5283High
Mozilla Firefox before version 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.
- CVE-2016-5275High
Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before version 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
- CVE-2016-5273High
The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before version 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
- CVE-2016-5266High
Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (dataTransfer) actions for file: URIs, allowing user-assisted remote attackers to access local files via a crafted web site.
- CVE-2016-5264High
A use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.
- CVE-2016-5263High
The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, allowing remote attackers to execute arbitrary code via a crafted web site that leverages 'type confusion.'
- CVE-2016-5259High
A use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.
- CVE-2016-5255High
A use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before version 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript mishandled during incremental garbage collection.
- CVE-2016-5252High
A stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.
- CVE-2016-2835High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before version 48.0 may allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Original NVD description (English source)
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.