CVE:CVE-2015-4477
CNNVD:CNNVD-201508-341
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 40.0之前版本的MediaStream回放功能中存在释放后重用漏洞。远程攻击者可通过使用Web Audio API利用该漏洞执行任意代码。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade mozilla firefox to a higher version than 39.0.3,and avoid the version (,39.0.3]