CVE-2015-0813

CVSS v2.0 5.1 (Medium)

EPSS 4.49 % (93^th)

Affected Products 4

Advisories 13

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.

Weaknesses

CWE-NVD-Other

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2015-04-01 10:59:12
(9 years ago)
Updated Date: 2017-01-03 02:59:43
(7 years ago)

Affected Products

Linux

Linux Kernel

Mozilla

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox 36.0.4 and prior versions	cpe:2.3:a:mozilla:firefox	<= 36.0.4
OR
	Running on/with
	Mozilla Firefox Esr 31.5.3 and prior versions	cpe:2.3:a:mozilla:firefox_esr	<= 31.5.3
OR
	Running on/with
	Mozilla Thunderbird 31.5 and prior versions	cpe:2.3:a:mozilla:thunderbird	<= 31.5
OR
	Running on/with
	Linux Kernel	cpe:2.3:o:linux:linux_kernel