critical10.0
CVE-2015-2725
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remo…
Impact
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Suse Linux Enterprise Software Development Kit | Version 12.0 |
| Novell | Suse Linux Enterprise Desktop | Version 12.0 |
| Novell | Suse Linux Enterprise Server | Versions 11, 12.0 |
| Oracle | Solaris | Version 11.3 |
| Mozilla | Firefox | Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1, 31.5.2 |
| Mozilla | Firefox Esr | Versions 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0 |
| Mozilla | Thunderbird | through 38.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1056410
- https://bugzilla.mozilla.org/show_bug.cgi?id=1151650
- https://bugzilla.mozilla.org/show_bug.cgi?id=1156861
- https://bugzilla.mozilla.org/show_bug.cgi?id=1159321
- https://bugzilla.mozilla.org/show_bug.cgi?id=1159973
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163359
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163852
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172076
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172397
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html