CVEvulnerability
CVE-2015-2724
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-07-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected configurations
• oracle solaris 11.3
• mozilla firefox 31.0
• mozilla firefox 31.1.0
• mozilla firefox 31.1.1
• mozilla firefox 31.3.0
• mozilla firefox 31.5.1
• mozilla firefox 31.5.2
• mozilla firefox 31.5.3
• mozilla firefox 38.0
• mozilla firefox esr 31.1
• mozilla firefox esr 31.2
• mozilla firefox esr 31.3
• mozilla firefox esr 31.4
• mozilla firefox esr 31.5
• mozilla firefox esr 31.6.0
• mozilla firefox esr 31.7.0
• novell suse linux enterprise software development kit 12.0
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 14.10
• canonical ubuntu linux 15.04
• debian debian linux 7.0
• debian debian linux 8.0
• novell suse linux enterprise desktop 12.0
• novell suse linux enterprise server 11
• novell suse linux enterprise server 12.0
• mozilla thunderbird (<= 38.0.1)
• mozilla firefox (<= 38.1.0)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1207.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1455.html rhn.redhat.com
- http://www.debian.org/security/2015/dsa-3300 www.debian.org
- http://www.debian.org/security/2015/dsa-3324 Third Party Advisory
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Third Party Advisory
- http://www.securityfocus.com/bid/75541 www.securityfocus.com
- http://www.securitytracker.com/id/1032783 www.securitytracker.com
- http://www.securitytracker.com/id/1032784 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2656-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2656-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2673-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143679 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154876 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160884 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164567 Issue Tracking
- https://security.gentoo.org/glsa/201512-10 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1207.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-1455.html rhn.redhat.com
- http://www.debian.org/security/2015/dsa-3300 www.debian.org
- http://www.debian.org/security/2015/dsa-3324 Third Party Advisory
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Third Party Advisory
- http://www.securityfocus.com/bid/75541 www.securityfocus.com
- http://www.securitytracker.com/id/1032783 www.securitytracker.com
- http://www.securitytracker.com/id/1032784 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2656-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2656-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2673-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143679 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154876 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160884 Issue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164567 Issue Tracking
- https://security.gentoo.org/glsa/201512-10 security.gentoo.org