CVE-2015-4492
Publication date 11 August 2015
Last updated 24 July 2024
Ubuntu priority
Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| firefox | ||
| 14.04 LTS trusty |
Fixed 40.0+build4-0ubuntu0.14.04.1
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2702-1
- Firefox vulnerabilities
- 11 August 2015