Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

UBUNTU-CVE-2015-2733 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceUBUNTU-CVE-2015-2733

UBUNTU-CVE-2015-2733

MEDIUM5.5

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitr

Published Jul 5, 2015

Modified 6 months ago

Fix available

Details

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.

Affected Packages

firefox

Ubuntu 14.04 LTS

Fixed in:

39.0+build5-0ubuntu0.14.04.1

References

http://www.mozilla.org/security/announce/2015/mfsa2015-65.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1169867

https://ubuntu.com/security/CVE-2015-2733

https://ubuntu.com/security/notices/USN-2656-1

https://ubuntu.com/security/notices/USN-2656-2

https://www.cve.org/CVERecord?id=CVE-2015-2733

https://www.mozilla.org/en-US/security/advisories/mfsa2015-65/

Upstream

Related

USN-2656-1 USN-2656-2

Ecosystems

Ubuntu 14.04 LTS

Timeline

PublishedJul 5, 2015

ModifiedSep 8, 2025