CVE-2015-7179 describes a buffer overflow vulnerability in the VertexBufferInterface::reserveVertexSpace function within ANGLE's libGLES, affecting Mozilla Firefox before version 41.0 and Firefox ESR 38.x before 38.3 on Windows. This flaw allows remote attackers to execute arbitrary code or cause a denial of service through crafted OpenGL or WebGL content. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While the vulnerability has a high FAUCET risk score, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and limited community discussion or media coverage beyond initial reporting.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 40.0.3CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | ||
38.0CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:* | ||
38.0.1CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:* | ||
38.0.5CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:* | ||
38.1.0CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.