What’s Vulnerable › Vulnerabilities

CVE-2015-0831

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-02-25 · updated 2026-06-17

Description

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 14.10
• Mozilla Firefox: through 35.0.1; 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+226)
• Mozilla Firefox ESR: 31.1, 31.2, 31.3, 31.4, 31.5
• Mozilla Thunderbird: through 31.4; 31.0, 31.1.2, 31.2, 31.3
• Red Hat Enterprise Linux: 5, 6.0

References

• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
• http://rhn.redhat.com/errata/RHSA-2015-0265.html
• http://rhn.redhat.com/errata/RHSA-2015-0266.html
• http://rhn.redhat.com/errata/RHSA-2015-0642.html
• http://www.debian.org/security/2015/dsa-3174

Get alerted when CVE-2015-0831 or the next vulnerability affects your stack