CVE-2015-2713

Advisory lineage Upstream: 0 Downstream: 13
Modified
Published: 14 May 2015, 10:00
Last modified:06 Aug 2024, 05:24

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
1.75% LOW
2% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 May 2015, 10:00
Published
Vulnerability first disclosed
06 Aug 2024, 05:24
Last Modified
Vulnerability information updated

Description

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 1.75%• Percentile: 83%

Affected Systems

  • Unknown•Firefox

    ≤ 37.0.2 | 31.0 | 31.1.0 | 31.1.1 | 31.3.0 | 31.5.1 | 31.5.2 | 31.5.3

  • mozilla•firefox_esr

    31.1 | 31.2 | 31.3 | 31.4 | 31.5 | 31.6.0

  • mozilla•thunderbird

    ≤ 31.5

  • novell•suse_linux_enterprise_desktop

    12.0

  • novell•suse_linux_enterprise_server

    12.0

  • novell•suse_linux_enterprise_software_development_kit

    12.0

  • opensuse•opensuse

    13.1 | 13.2

References (17)