Unrated severityNVD Advisory· Published Jul 6, 2015· Updated Jun 17, 2026

CVE-2015-2722

Description

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mozilla Corporation/Firefox17 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=38.1.0
- cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.7.0:*:*:*:*:*:*:*
- (no CPE)range: <39.0 (Firefox); ESR 31.x <31.8, 38.x <38.1
Novell/Suse Linux Enterprise Software Development Kit
cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Desktop
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Server2 versions
cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
Oracle Corporation/Solaris
cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
osv-coords54 versions
pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed pkg:rpm/suse/firefox-gcc47&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/firefox-gcc47&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/firefox-gcc47&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012
< 128.5.1-1.1+ 53 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 50.1.0-1.1
- (no CPE)range: < 45.5.1-1.1
- (no CPE)range: < 4.7.2_20130108-0.37.2
- (no CPE)range: < 4.7.2_20130108-0.37.2
- (no CPE)range: < 4.7.2_20130108-0.37.2
- (no CPE)range: < 31.0-0.5.7.11
- (no CPE)range: < 31.0-0.5.7.11
- (no CPE)range: < 31.0-0.5.7.11
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 38.2.0esr-10.1
- (no CPE)range: < 38.2.0esr-10.1
- (no CPE)range: < 38.2.0esr-10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1
- (no CPE)range: < 3.19.2.0-0.7.1
- (no CPE)range: < 3.19.2.0-0.7.1
- (no CPE)range: < 3.19.2.0-0.7.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.htmlnvdThird Party Advisory
www.mozilla.org/security/announce/2015/mfsa2015-65.htmlnvdVendor Advisory
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlnvdThird Party Advisory
bugzilla.mozilla.org/show_bug.cginvdIssue TrackingVendor Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.htmlnvd
lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.htmlnvd
lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.htmlnvd
rhn.redhat.com/errata/RHSA-2015-1207.htmlnvd
www.securityfocus.com/bid/75541nvd
www.securitytracker.com/id/1032783nvd
www.securitytracker.com/id/1032784nvd
www.ubuntu.com/usn/USN-2656-1nvd
www.ubuntu.com/usn/USN-2656-2nvd
security.gentoo.org/glsa/201512-10nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000