CVE Daily

CVE-2015-7200

The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefo...

High CVSS 7.5

Overview

The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.

CWE: CWE-17 Published: 2015-11-05T05:59:24.280
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags