SecuritySpace - CVE-2015-2712

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-2712

Description: The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2712
BugTraq ID: 74611
http://www.securityfocus.com/bid/74611
https://security.gentoo.org/glsa/201605-06
SuSE Security Announcement: openSUSE-SU-2015:0934 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
http://www.ubuntu.com/usn/USN-2602-1

CVE ID:	CVE-2015-2712
Description:	The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2712 BugTraq ID: 74611 http://www.securityfocus.com/bid/74611 https://security.gentoo.org/glsa/201605-06 SuSE Security Announcement: openSUSE-SU-2015:0934 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html http://www.ubuntu.com/usn/USN-2602-1