CVE-2015-7178

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles…

published September 24, 2015

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03416 · 88.8th percentile
Published
2015-09-24T01:00Z
EPSS history
Timeline
  • 24 SEP 01:00Z
    The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles…
    cvelistv5