CVE-2015-0831

Published: Feb 25, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

Affected (248)

Products: Mozilla: Thunderbird, Firefox, Firefox Esr · Canonical: Ubuntu Linux · Redhat: Enterprise Linux

3 products

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Mozilla Thunderbird	Up to 31.4
Mozilla Thunderbird	Version 31.0
Mozilla Thunderbird	Version 31.1.2
Mozilla Thunderbird	Version 31.2
Mozilla Thunderbird	Version 31.3

Configuration B

231 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 35.0.1
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.1
Mozilla Firefox	Version 0.2
Mozilla Firefox	Version 0.3
Mozilla Firefox	Version 0.4
Mozilla Firefox	Version 0.5
Mozilla Firefox	Version 0.6.1
Mozilla Firefox	Version 0.6
Mozilla Firefox	Version 0.7.1
Mozilla Firefox	Version 0.7
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.0 preview_release
Mozilla Firefox	Version 1.4.1
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 1.8
Mozilla Firefox	Version 10.0.10
Mozilla Firefox	Version 10.0.11
Mozilla Firefox	Version 10.0.12
Mozilla Firefox	Version 10.0.1
Mozilla Firefox	Version 10.0.2
Mozilla Firefox	Version 10.0.3
Mozilla Firefox	Version 10.0.4
Mozilla Firefox	Version 10.0.5
Mozilla Firefox	Version 10.0.6
Mozilla Firefox	Version 10.0.7
Mozilla Firefox	Version 10.0.8
Mozilla Firefox	Version 10.0.9
Mozilla Firefox	Version 10.0
Mozilla Firefox	Version 11.0
Mozilla Firefox	Version 12.0
Mozilla Firefox	Version 12.0 beta6
Mozilla Firefox	Version 13.0.1
Mozilla Firefox	Version 13.0
Mozilla Firefox	Version 14.0.1
Mozilla Firefox	Version 14.0
Mozilla Firefox	Version 15.0.1
Mozilla Firefox	Version 15.0
Mozilla Firefox	Version 16.0.1
Mozilla Firefox	Version 16.0.2
Mozilla Firefox	Version 16.0
Mozilla Firefox	Version 17.0.10
Mozilla Firefox	Version 17.0.11
Mozilla Firefox	Version 17.0.1
Mozilla Firefox	Version 17.0.2
Mozilla Firefox	Version 17.0.3
Mozilla Firefox	Version 17.0.4
Mozilla Firefox	Version 17.0.5
Mozilla Firefox	Version 17.0.6
Mozilla Firefox	Version 17.0.7
Mozilla Firefox	Version 17.0.8
Mozilla Firefox	Version 17.0.9
Mozilla Firefox	Version 17.0
Mozilla Firefox	Version 18.0.1
Mozilla Firefox	Version 18.0.2
Mozilla Firefox	Version 18.0
Mozilla Firefox	Version 19.0.1
Mozilla Firefox	Version 19.0.2
Mozilla Firefox	Version 19.0
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.15
Mozilla Firefox	Version 2.0.0.16
Mozilla Firefox	Version 2.0.0.17
Mozilla Firefox	Version 2.0.0.18
Mozilla Firefox	Version 2.0.0.19
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.20
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 20.0.1
Mozilla Firefox	Version 20.0
Mozilla Firefox	Version 21.0
Mozilla Firefox	Version 22.0
Mozilla Firefox	Version 23.0.1
Mozilla Firefox	Version 23.0
Mozilla Firefox	Version 24.0
Mozilla Firefox	Version 24.1.1
Mozilla Firefox	Version 24.1
Mozilla Firefox	Version 25.0.1
Mozilla Firefox	Version 25.0
Mozilla Firefox	Version 26.0
Mozilla Firefox	Version 27.0.1
Mozilla Firefox	Version 27.0
Mozilla Firefox	Version 28.0
Mozilla Firefox	Version 29.0.1
Mozilla Firefox	Version 29.0
Mozilla Firefox	Version 3.0.10
Mozilla Firefox	Version 3.0.11
Mozilla Firefox	Version 3.0.12
Mozilla Firefox	Version 3.0.13
Mozilla Firefox	Version 3.0.14
Mozilla Firefox	Version 3.0.15
Mozilla Firefox	Version 3.0.16
Mozilla Firefox	Version 3.0.17
Mozilla Firefox	Version 3.0.18
Mozilla Firefox	Version 3.0.19
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0.2
Mozilla Firefox	Version 3.0.3
Mozilla Firefox	Version 3.0.4
Mozilla Firefox	Version 3.0.5
Mozilla Firefox	Version 3.0.6
Mozilla Firefox	Version 3.0.7
Mozilla Firefox	Version 3.0.8
Mozilla Firefox	Version 3.0.9
Mozilla Firefox	Version 3.0
Mozilla Firefox	Version 3.5.10
Mozilla Firefox	Version 3.5.11
Mozilla Firefox	Version 3.5.12
Mozilla Firefox	Version 3.5.13
Mozilla Firefox	Version 3.5.14
Mozilla Firefox	Version 3.5.15
Mozilla Firefox	Version 3.5.16
Mozilla Firefox	Version 3.5.17
Mozilla Firefox	Version 3.5.18
Mozilla Firefox	Version 3.5.19
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Firefox	Version 3.5.6
Mozilla Firefox	Version 3.5.7
Mozilla Firefox	Version 3.5.8
Mozilla Firefox	Version 3.5.9
Mozilla Firefox	Version 3.5
Mozilla Firefox	Version 3.6.10
Mozilla Firefox	Version 3.6.11
Mozilla Firefox	Version 3.6.12
Mozilla Firefox	Version 3.6.13
Mozilla Firefox	Version 3.6.14
Mozilla Firefox	Version 3.6.15
Mozilla Firefox	Version 3.6.16
Mozilla Firefox	Version 3.6.17
Mozilla Firefox	Version 3.6.18
Mozilla Firefox	Version 3.6.19
Mozilla Firefox	Version 3.6.20
Mozilla Firefox	Version 3.6.21
Mozilla Firefox	Version 3.6.22
Mozilla Firefox	Version 3.6.23
Mozilla Firefox	Version 3.6.24
Mozilla Firefox	Version 3.6.25
Mozilla Firefox	Version 3.6.26
Mozilla Firefox	Version 3.6.27
Mozilla Firefox	Version 3.6.28
Mozilla Firefox	Version 3.6.2
Mozilla Firefox	Version 3.6.3
Mozilla Firefox	Version 3.6.4
Mozilla Firefox	Version 3.6.6
Mozilla Firefox	Version 3.6.7
Mozilla Firefox	Version 3.6.8
Mozilla Firefox	Version 3.6.9
Mozilla Firefox	Version 3.6
Mozilla Firefox	Version 30.0
Mozilla Firefox	Version 31.1.0
Mozilla Firefox	Version 32.0
Mozilla Firefox	Version 33.0
Mozilla Firefox	Version 34.0.5
Mozilla Firefox	Version 4.0.1
Mozilla Firefox	Version 4.0
Mozilla Firefox	Version 4.0 beta10
Mozilla Firefox	Version 4.0 beta11
Mozilla Firefox	Version 4.0 beta12
Mozilla Firefox	Version 4.0 beta1
Mozilla Firefox	Version 4.0 beta2
Mozilla Firefox	Version 4.0 beta3
Mozilla Firefox	Version 4.0 beta4
Mozilla Firefox	Version 4.0 beta5
Mozilla Firefox	Version 4.0 beta6
Mozilla Firefox	Version 4.0 beta7
Mozilla Firefox	Version 4.0 beta8
Mozilla Firefox	Version 4.0 beta9
Mozilla Firefox	Version 5.0.1
Mozilla Firefox	Version 5.0
Mozilla Firefox	Version 6.0.1
Mozilla Firefox	Version 6.0.2
Mozilla Firefox	Version 6.0
Mozilla Firefox	Version 7.0.1
Mozilla Firefox	Version 7.0
Mozilla Firefox	Version 8.0.1
Mozilla Firefox	Version 8.0
Mozilla Firefox	Version 9.0.1
Mozilla Firefox	Version 9.0

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 31.0
Mozilla Firefox	Version 31.1.1
Mozilla Firefox Esr	Version 31.1
Mozilla Firefox Esr	Version 31.2
Mozilla Firefox Esr	Version 31.3
Mozilla Firefox Esr	Version 31.4
Mozilla Firefox Esr	Version 31.5

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0

References (44)

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html

Source: security@mozilla.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0265.html

Source: security@mozilla.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0266.html

Source: security@mozilla.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0642.html

Source: security@mozilla.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3174

Source: security@mozilla.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3179

Source: security@mozilla.org

Third Party Advisory

http://www.mozilla.org/security/announce/2015/mfsa2015-16.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Source: security@mozilla.org

Third Party Advisory

http://www.securityfocus.com/bid/72746

Source: security@mozilla.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1031791

Source: security@mozilla.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1031792

Source: security@mozilla.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2505-1

Source: security@mozilla.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2506-1

Source: security@mozilla.org

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1130541

Source: security@mozilla.org

Issue Tracking

https://security.gentoo.org/glsa/201504-01

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html