CVE-2015-2713: Use After Free
Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2713?
CVE-2015-2713 has a critical severity rating due to its capability to allow remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2015-2713?
To fix CVE-2015-2713, update Mozilla Firefox to version 38.0 or later, or Thunderbird and Firefox ESR to version 31.7 or later.
Which software is affected by CVE-2015-2713?
CVE-2015-2713 affects Mozilla Firefox versions before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird versions before 31.7, along with specific SUSE Linux and openSUSE versions.
What type of vulnerability is described in CVE-2015-2713?
CVE-2015-2713 is a use-after-free vulnerability that can lead to heap memory corruption.
Can CVE-2015-2713 lead to data loss?
Yes, CVE-2015-2713 can potentially lead to data loss by allowing remote code execution or causing a denial of service.