Security Advisory

CVE-2015-2715

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-05-14 10:00:00
Last updated 2024-08-06 05:24:38
Assigner mozilla
CVSS score not scored
State PUBLISHED

Description

Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.