CVEvulnerability

CVE-2015-4488

7.5 HIGH Published 2015-08-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-08-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.

Affected configurations

• oracle solaris 11.3 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.04 • opensuse opensuse 13.1 • opensuse opensuse 13.2 • mozilla firefox (<= 39.0.3) • mozilla firefox 38.0 • mozilla firefox 38.0.1 • mozilla firefox 38.0.5 • mozilla firefox 38.1.0 • mozilla firefox os 2.1.0

References