CVEvulnerability
CVE-2015-7200
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-17
Description
The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
Affected configurations
• mozilla firefox (<= 41.0.2)
• mozilla firefox 38.0
• mozilla firefox 38.0.1
• mozilla firefox 38.0.5
• mozilla firefox 38.1.0
• mozilla firefox 38.1.1
• mozilla firefox 38.2.0
• mozilla firefox 38.2.1
• mozilla firefox 38.3.0
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1982.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-2519.html rhn.redhat.com
- http://www.debian.org/security/2015/dsa-3393 www.debian.org
- http://www.debian.org/security/2015/dsa-3410 www.debian.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html www.oracle.com
- http://www.securityfocus.com/bid/77411 www.securityfocus.com
- http://www.securitytracker.com/id/1034069 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2785-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2819-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204155 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201512-10 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1982.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2015-2519.html rhn.redhat.com
- http://www.debian.org/security/2015/dsa-3393 www.debian.org
- http://www.debian.org/security/2015/dsa-3410 www.debian.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html www.oracle.com
- http://www.securityfocus.com/bid/77411 www.securityfocus.com
- http://www.securitytracker.com/id/1034069 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2785-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2819-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204155 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201512-10 security.gentoo.org