CVE-2015-4489
HighSummary
The nsTArray_Impl class in Mozilla Firefox before version 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 may allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, affecting the availability of applications and systems. Additionally, unspecified impact may lead to further security threats.
Recommendation
It is recommended to update Mozilla Firefox to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Mozilla Firefox, Firefox ESR, Firefox OS
See all- CVE-2015-4488High
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before version 40.0, Firefox ESR 38.x before version 38.2, and Firefox OS before version 2.2. It allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
- CVE-2015-4487High
The nsTSubstring::ReplacePrep function in Mozilla Firefox before version 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an 'overflow.'
Original NVD description (English source)
The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.