Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-2729

Опубликовано: 06 июл. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5

Описание

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

РелизСтатусПримечание
devel

released

39.0+build5-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [39.0+build5-0ubuntu0.14.04.1]]
precise

released

39.0+build5-0ubuntu0.12.04.2
trusty

released

39.0+build5-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [39.0+build5-0ubuntu0.14.04.1]
upstream

released

39.0
utopic

released

39.0+build5-0ubuntu0.14.10.1
vivid

released

39.0+build5-0ubuntu0.15.04.1

Показывать по

EPSS

Процентиль: 62%
0.00438
Низкий

5 Medium

CVSS2

Связанные уязвимости

redhat
около 10 лет назад

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

nvd
около 10 лет назад

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

debian
около 10 лет назад

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio ...

github
около 3 лет назад

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

oracle-oval
около 10 лет назад

ELSA-2015-1207: firefox security update (CRITICAL)

EPSS

Процентиль: 62%
0.00438
Низкий

5 Medium

CVSS2