CVE-2015-4497
Description
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.04
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update for SeaMonkey (2.35) | Windows |
| Vulnerability CVE-2015-4497,CVE-2015-4498 are affected in Mozilla Firefox 40.0.2 | Windows |
| Vulnerabilities CVE-2015-4498,CVE-2015-4497 are fixed in Update for Mozilla Firefox For Mac (40.0.3) | Mac |
| Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.0 | Mac |
| Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.0 | Mac |
| Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.1.0 | Mac |
| Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.1.0 | Mac |
| Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.0.1 | Mac |
| Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.0.5 | Mac |
| Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.0.1 | Mac |
| Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.0.5 | Mac |
| Multiple Vulnerabilities are affected in Firefox ESR for Mac 38.2.0 | Mac |
| Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 38.2.0 | Mac |
| Vulnerabilities CVE-2015-4497,CVE-2015-4498 are affected in Mozilla Firefox for Mac 40.0.2 | Mac |
| Vulnerabilities CVE-2015-4498,CVE-2015-4497 are fixed in Mozilla Firefox For Mac 38.2.1 | Mac |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-301494 | Update for SeaMonkey (2.35) |
| PATCH-343015 | Mozilla Firefox (132.0.2) |
| PATCH-607000 | Mozilla Firefox For Mac (124.0) |
| PATCH-611808 | Mozilla Firefox ESR for MAC 128.14.0 |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611808 | Mozilla Firefox ESR for MAC 128.14.0 |
| PATCH-611808 | Mozilla Firefox ESR for MAC 128.14.0 |
| PATCH-611808 | Mozilla Firefox ESR for MAC 128.14.0 |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611808 | Mozilla Firefox ESR for MAC 128.14.0 |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-612783 | Mozilla Firefox For Mac (145.0.1) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234