CVE-2015-0817

The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases…

published March 24, 2015

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03681 · 89.6th percentile
Published
2015-03-24T00:00Z
EPSS history
Timeline
  • 24 MAR 00:00Z
    The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases…
    cvelistv5