Published: 13 May 2015
Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.
Launchpad, Ubuntu, Debian
Does not exist
(trusty was released [38.0+build3-0ubuntu0.14.04.1])