mozilla: code execution
| Package(s): | firefox, thunderbird, seamonkey | CVE #(s): | CVE-2015-0828 | ||||||||||||||||||||
| Created: | March 2, 2015 | Updated: | March 4, 2015 | ||||||||||||||||||||
| Description: | From the CVE entry:
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||