Security Advisory

CVE-2015-7196

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-05 02:00:00
Last updated 2024-08-06 07:43:45
Assigner mozilla
CVSS score not scored
State PUBLISHED

Description

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.