ALT-PU-2015-1733-1
Package firefox-esr updated to version 38.2.1-alt0.M70P.1 for branch p7 in task 148636.
Closed vulnerabilities
Published: 2015-08-29
BDU:2015-11311
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
Severity: CRITICAL (10.0)
References:
Published: 2015-08-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
Severity: CRITICAL (10.0)
References:
- SUSE-SU-2015:1504
- SUSE-SU-2015:1504
- SUSE-SU-2015:2081
- SUSE-SU-2015:2081
- openSUSE-SU-2015:1492
- openSUSE-SU-2015:1492
- RHSA-2015:1693
- RHSA-2015:1693
- DSA-3345
- DSA-3345
- http://www.mozilla.org/security/announce/2015/mfsa2015-94.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-94.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- 76502
- 76502
- 1033397
- 1033397
- USN-2723-1
- USN-2723-1
- http://www.zerodayinitiative.com/advisories/ZDI-15-406
- http://www.zerodayinitiative.com/advisories/ZDI-15-406
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164766
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164766
- https://bugzilla.mozilla.org/show_bug.cgi?id=1175278
- https://bugzilla.mozilla.org/show_bug.cgi?id=1175278
No data currently available.
No data currently available.