CVE-2015-2733: Use After Free
Last updated 24 July 2024
Other sources
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is CVE-2015-2733?
CVE-2015-2733 is a use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox.
How does CVE-2015-2733 work?
CVE-2015-2733 allows remote attackers to execute arbitrary code by attaching an XMLHttpRequest object to a dedicated worker.
What is the severity of CVE-2015-2733?
CVE-2015-2733 has a severity rating of critical (10).
How can I fix CVE-2015-2733?
To fix CVE-2015-2733, update your Mozilla Firefox to version 39.0 or later.
Where can I find more information about CVE-2015-2733?
You can find more information about CVE-2015-2733 on the MITRE CVE website, Mozilla Security Advisories, and Bugzilla.