NetSight
IP …
critical9.3

CVE-2015-2736

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesse…

Impact

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

Affected products

VendorProductAffected versions
MozillaFirefox
through 38.1.0
Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1
MozillaThunderbird
through 38.0.1
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0
OracleSolaris
Version 11.3
NovellSuse Linux Enterprise Software Development Kit
Version 12.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10, 15.04
DebianDebian Linux
Versions 7.0, 8.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Server
Versions 11, 12.0

Weakness classification

CWE-17

References