CVE-2015-2722: Use After Free
Last updated 24 July 2024
Other sources
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mozilla Firefoxto a version that resolves this vulnerability.Fixed in 39.0 - Upgrade
Upgrade
Mozilla Firefox ESR 31.xto a version that resolves this vulnerability.Fixed in 31.8 - Upgrade
Upgrade
Mozilla Firefox 38.xto a version that resolves this vulnerability.Fixed in 38.1
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2722?
The severity of CVE-2015-2722 is critical with a severity value of 10.
How does CVE-2015-2722 affect Oracle Solaris 11.3?
CVE-2015-2722 affects Oracle Solaris 11.3.
How does CVE-2015-2722 affect Mozilla Firefox ESR 31.0?
CVE-2015-2722 affects Mozilla Firefox ESR 31.0.
How can remote attackers exploit CVE-2015-2722?
Remote attackers can exploit CVE-2015-2722 through vectors involving attachment of an XMLHttpRequest object to a shared worker.
Are there any available remedies for CVE-2015-2722?
There are no available remedies for CVE-2015-2722 at the moment.