cve/2015/CVE-2015-0804.md

CVE-2015-0804

Description

The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.ubuntu.com/usn/USN-2550-1

Github

No PoCs found on GitHub currently.