CVE-2015-4509: Use After Free
Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4509?
CVE-2015-4509 has a critical severity rating as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2015-4509?
To fix CVE-2015-4509, update your Mozilla Firefox or Firefox ESR to the latest version which includes the security patch.
Which versions of Mozilla Firefox are affected by CVE-2015-4509?
CVE-2015-4509 affects Mozilla Firefox versions prior to 41.0 and Firefox ESR versions before 38.3.
Can CVE-2015-4509 be exploited remotely?
Yes, CVE-2015-4509 can be exploited remotely through crafted JavaScript code targeting the HTMLVideoElement interface.
Is there a workaround for CVE-2015-4509 if I cannot update?
There are no effective workarounds for CVE-2015-4509; updating to a secure version is the only reliable solution.