Endpoint Vulnerability

Use-after-free in IndexedDB

Description

Security researcher Paul Bandha used the used the Address Sanitizer tool to discover a use-after-free vulnerability when running specific web content with IndexedDB to create an index. This leads to a potentially exploitable crash.

Affected Products

SeaMonkey

References

CVE-2015-0831,