Vulnetix
Try Vulnetix Request Demo
CVE-2015-4487 PUBLISHED

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."

EPSS 2.68% · 85.7th percentile

Risk Scores

EPSS Score
2.68%
85.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSthunderbird0, 1:24.0+build1-0ubuntu1, 1:24.0+build1-0ubuntu2
Ubuntu:14.04:LTSfirefox37.0+build2-0ubuntu0.14.04.1, 37.0.1+build1-0ubuntu0.14.04.1, 37.0.2+build1-0ubuntu0.14.04.1

Timeline

References

Open in Interactive Console →