Vulnerability Description
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Solaris | 11.3 |
| Canonical | Ubuntu Linux | 12.04 |
| Opensuse | Opensuse | 13.1 |
| Mozilla | Firefox | <= 39.0.3 |
| Mozilla | Firefox Os | 2.1.0 |
References
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
FAQ
What is CVE-2015-4488?
CVE-2015-4488 is a vulnerability with a CVSS score of 7.5 (HIGH). Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified imp...
How severe is CVE-2015-4488?
CVE-2015-4488 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-4488?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Solaris, Canonical Ubuntu Linux, Opensuse Opensuse, Mozilla Firefox, Mozilla Firefox Os.