CVE-2015-2742

 

Published at: - 06-07-2015 04:01

Last modified: - 20-10-2022 08:52

Total changes: - 4

Description

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• http://www.mozilla.org/security/announce/2015/mfsa2015-68.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1138669
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
• 75541-
• GLSA-201512-10-
• 1032783-

 

Keywords

NVD

 

CVE-2015-2742

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures