CVE-2015-2722: Use After Free
Published Jul 6, 2015
·Updated
Last updated 24 July 2024
Other sources
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
— Launchpad
Affected Software
30 affected components
debian/iceweasel
Oracle Solaris=11.3
Mozilla Firefox=31.0
Mozilla Firefox=31.1.0
Mozilla Firefox=31.1.1
Mozilla Firefox=31.3.0
Mozilla Firefox=31.5.1
Mozilla Firefox=31.5.2
Mozilla Firefox=31.5.3
Mozilla Firefox=38.0
Mozilla Firefox ESR=31.1
Mozilla Firefox ESR=31.2
Mozilla Firefox ESR=31.3
Mozilla Firefox ESR=31.4
Mozilla Firefox ESR=31.5
Mozilla Firefox ESR=31.6.0
Mozilla Firefox ESR=31.7.0
Mozilla Firefox<=38.1.0
Novell Suse Linux Enterprise Software Development Kit=12.0
Novell Suse Linux Enterprise Desktop=12.0
Novell Suse Linux Enterprise Server=11-sp4
Novell Suse Linux Enterprise Server=12.0
Mozilla Firefox ESR=31.0
Mozilla Firefox ESR=31.1.0
Mozilla Firefox ESR=31.1.1
Mozilla Firefox ESR=31.3.0
Mozilla Firefox ESR=31.5.1
Mozilla Firefox ESR=31.5.2
Mozilla Firefox ESR=31.5.3
Mozilla Firefox ESR=38.0
Event History
Jul 6, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·02:00 AM
DescriptionSeverityAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:09 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:06 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2015-2722?
The severity of CVE-2015-2722 is critical with a severity value of 10.
2
How does CVE-2015-2722 affect Oracle Solaris 11.3?
CVE-2015-2722 affects Oracle Solaris 11.3.
3
How does CVE-2015-2722 affect Mozilla Firefox ESR 31.0?
CVE-2015-2722 affects Mozilla Firefox ESR 31.0.
4
How can remote attackers exploit CVE-2015-2722?
Remote attackers can exploit CVE-2015-2722 through vectors involving attachment of an XMLHttpRequest object to a shared worker.
5
Are there any available remedies for CVE-2015-2722?
There are no available remedies for CVE-2015-2722 at the moment.