CVE-2015-4488
HighSummary
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before version 40.0, Firefox ESR 38.x before version 38.2, and Firefox OS before version 2.2. It allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
Risk Assessment
An attacker may exploit this vulnerability to perform malicious actions, potentially leading to unauthorized access or code execution.
Recommendation
It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability.
Other vulnerabilities in Mozilla Firefox, Firefox ESR, Firefox OS
See all- CVE-2015-4489High
The nsTArray_Impl class in Mozilla Firefox before version 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 may allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
- CVE-2015-4487High
The nsTSubstring::ReplacePrep function in Mozilla Firefox before version 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an 'overflow.'
Original NVD description (English source)
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.