cve/2015/CVE-2015-0828.md

CVE-2015-0828

Description

Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Github

No PoCs found on GitHub currently.