CVE-2015-2715

Publication date

2015-05-14 10:00:00

Family

mozilla

State

PUBLISHED

Description

Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.