CVE-2015-0823
Publication date 25 February 2015
Last updated 24 July 2024
Ubuntu priority
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| firefox | ||
| 14.04 LTS trusty |
Fixed 36.0+build2-0ubuntu0.14.04.4
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2505-1
- Firefox vulnerabilities
- 25 February 2015
Other references
- https://www.mozilla.org/en-US/security/advisories/mfsa2015-23/
- https://github.com/khaledhosny/ots/commit/003c62d28ae438aa8943cb31535563397f838a2c
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098497
- http://www.mozilla.org/security/announce/2015/mfsa2015-23.html
- https://www.cve.org/CVERecord?id=CVE-2015-0823