CVEvulnerability

CVE-2015-2740

10.0 HIGH Published 2015-07-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.

Affected configurations

• mozilla thunderbird (<= 38.0.1) • mozilla firefox 31.0 • mozilla firefox 31.1.0 • mozilla firefox 31.1.1 • mozilla firefox 31.3.0 • mozilla firefox 31.5.1 • mozilla firefox 31.5.2 • mozilla firefox 31.5.3 • mozilla firefox 38.0 • mozilla firefox esr 31.1 • mozilla firefox esr 31.2 • mozilla firefox esr 31.3 • mozilla firefox esr 31.4 • mozilla firefox esr 31.5 • mozilla firefox esr 31.6.0 • mozilla firefox esr 31.7.0 • novell suse linux enterprise software development kit 12.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 14.10 • canonical ubuntu linux 15.04 • debian debian linux 7.0 • debian debian linux 8.0 • novell suse linux enterprise desktop 12.0 • novell suse linux enterprise server 11 • novell suse linux enterprise server 12.0 • mozilla firefox (<= 38.1.0) • oracle solaris 11.3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References