CVE-2015-4492

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote…

published August 16, 2015

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05050 · 92.2th percentile
Published
2015-08-16T01:00Z
EPSS history
Timeline
  • 16 AUG 01:00Z
    Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote…
    cvelistv5