CVE-2015-7219

The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and…

published December 16, 2015

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02888 · 86.7th percentile
Published
2015-12-16T11:00Z
EPSS history
Timeline
  • 16 DEC 11:00Z
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and…
    cvelistv5