CVE-2015-4492: Use After Free
Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4492?
CVE-2015-4492 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2015-4492?
To mitigate CVE-2015-4492, users should update Mozilla Firefox to version 40.0 or later, or update Firefox ESR to version 38.2 or later.
Which versions of Firefox are affected by CVE-2015-4492?
CVE-2015-4492 affects Mozilla Firefox versions prior to 40.0 and Firefox ESR versions prior to 38.2.
Can CVE-2015-4492 impact both desktop and mobile versions of Firefox?
CVE-2015-4492 primarily affects the desktop versions of Firefox as it is related to the XMLHttpRequest implementation.
What specific component is exploited in CVE-2015-4492?
CVE-2015-4492 exploits a use-after-free vulnerability in the XMLHttpRequest::Open implementation.