CVE-2015-4487
HighSummary
The nsTSubstring::ReplacePrep function in Mozilla Firefox before version 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an 'overflow.'
Risk Assessment
This vulnerability may lead to serious availability issues, potentially affecting the organization's operational continuity and data security.
Recommendation
It is recommended to update Mozilla Firefox to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Mozilla Firefox, Firefox ESR, Firefox OS
See all- CVE-2015-4489High
The nsTArray_Impl class in Mozilla Firefox before version 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 may allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
- CVE-2015-4488High
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before version 40.0, Firefox ESR 38.x before version 38.2, and Firefox OS before version 2.2. It allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
Original NVD description (English source)
The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."