Vulnetix
Try Vulnetix Request Demo
CVE-2015-2713 PUBLISHED

Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.

EPSS 1.75% · 82.4th percentile

Risk Scores

EPSS Score
1.75%
82.4th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSthunderbird0, 1:24.0+build1-0ubuntu1, 1:24.0+build1-0ubuntu2
Ubuntu:14.04:LTSfirefox36.0.1+build2-0ubuntu0.14.04.1, 36.0.4+build1-0ubuntu0.14.04.1, 0

Timeline

References

Open in Interactive Console →