Home > Vulnerability Database > CVE-2015-0813

Mend.io Vulnerability Database

CVE-2015-0813

Date: April 1, 2015

Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.

Severity Score

5.6

Related Resources (21)

Url: http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Url: http://www.debian.org/security/2015/dsa-3211

Url: http://www.debian.org/security/2015/dsa-3212

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1106596

Url: http://www.securitytracker.com/id/1031996

Url: http://www.ubuntu.com/usn/USN-2550-1

Url: https://security.gentoo.org/glsa/201512-10

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-0813

Url: http://www.securityfocus.com/bid/73463

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-0813

Url: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html

Url: http://www.ubuntu.com/usn/USN-2552-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html

Url: http://www.securitytracker.com/id/1032000

Url: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0766.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html

Url: http://www.mozilla.org/security/announce/2015/mfsa2015-31.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0771.html

Url: https://access.redhat.com/security/cve/CVE-2015-0813

Url: https://www.mend.io/vulnerability-database/CVE-2015-0813

Severity Score

5.6

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	5.1
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2015-0813

Date: April 1, 2015

Severity Score

Related Resources (21)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?