critical10.0
CVE-2015-2724
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird b…
Impact
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Solaris | Version 11.3 |
| Mozilla | Firefox | Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1, 31.5.2 |
| Mozilla | Firefox Esr | Versions 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0 |
| Novell | Suse Linux Enterprise Software Development Kit | Version 12.0 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 14.10, 15.04 |
| Debian | Debian Linux | Versions 7.0, 8.0 |
| Novell | Suse Linux Enterprise Desktop | Version 12.0 |
| Novell | Suse Linux Enterprise Server | Versions 11, 12.0 |
| Mozilla | Thunderbird | through 38.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143679
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154876
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160884
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164567
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html