VULNERABILITY INTELLIGENCE

CVE-2015-4503

CVSS score5 NONE
EPSS probability1.56%
CISA KEVNot currently listed
Published2015-09-24
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a navigator.mozTCPSocket.open method call and send method calls, which allows remote TCP servers to obtain sensitive information from process memory by reading packet data, as demonstrated by availability of this API in a Firefox OS application.

Weakness classification

  • nvd@nist.gov: CWE-200

Primary references