CVE-2015-4509

{"id": "CVE-2015-4509", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-09-24T04:59:12.270", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html", "source": "security@mozilla.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-1834.html", "source": "security@mozilla.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-1852.html", "source": "security@mozilla.org"}, {"url": "http://www.debian.org/security/2015/dsa-3365", "source": "security@mozilla.org"}, {"url": "http://www.mozilla.org/security/announce/2015/mfsa2015-106.html", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html", "source": "security@mozilla.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", "source": "security@mozilla.org"}, {"url": "http://www.securityfocus.com/bid/76816", "source": "security@mozilla.org"}, {"url": "http://www.securitytracker.com/id/1033640", "source": "security@mozilla.org"}, {"url": "http://www.ubuntu.com/usn/USN-2743-1", "source": "security@mozilla.org"}, {"url": "http://www.ubuntu.com/usn/USN-2743-2", "source": "security@mozilla.org"}, {"url": "http://www.ubuntu.com/usn/USN-2743-3", "source": "security@mozilla.org"}, {"url": "http://www.ubuntu.com/usn/USN-2743-4", "source": "security@mozilla.org"}, {"url": "http://www.ubuntu.com/usn/USN-2754-1", "source": "security@mozilla.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-646", "source": "security@mozilla.org"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1198435", "source": "security@mozilla.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176."}, {"lang": "es", "value": "Vulnerabilidad de uso despu\u00e9s de liberaci\u00f3n en la memoria en la interfaz HTMLVideoElement en Mozilla Firefox en versiones anteriores a 41.0 y Firefox ESR 38.x en versiones anteriores a 38.3, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de c\u00f3digo JavaScript que modifica la tabla URI de un elemento media, tambi\u00e9n conocida como ZDI-CAN-3176."}], "lastModified": "2016-12-22T02:59:55.587", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A1DD76B-7682-4F61-B274-115D8A9B5306"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "332589F6-C6DB-4204-97FA-B60105BBF146"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A04D6EAE-C709-4752-976E-DB15EE6E85B0"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE52B8E3-3BA8-46DB-948E-958739FE91B1"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "818D58B7-3BA2-4CE5-9D9A-65F5B24AB6D0"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B50189A6-C058-46EA-9BE8-9D01E304D518"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F5442BB-3E3F-4E91-B76B-6B379B47E2BD"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EE7B0EF-4A3A-4353-8B50-6F28B5CADBDB", "versionEndIncluding": "40.0.3"}], "operator": "OR"}]}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>", "sourceIdentifier": "security@mozilla.org"}