Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2015-2715

Published: 13 May 2015

Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.

Priority

Medium

Status

Package Release Status
firefox
Launchpad, Ubuntu, Debian
upstream
Released (38.0)
precise
Released (38.0+build3-0ubuntu0.12.04.1)
trusty Does not exist
(trusty was released [38.0+build3-0ubuntu0.14.04.1])
utopic
Released (38.0+build3-0ubuntu0.14.10.1)
vivid
Released (38.0+build3-0ubuntu0.15.04.1)