HIGH7.5
Уязвимость браузера Google Chrome, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
Severity:
Closed issues (473)
HIGH7.5
Уязвимость браузера Firefox, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость программного обеспечения Firefox ESR, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость программного обеспечения SeaMonkey, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость программного обеспечения Thunderbird, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая удаленному злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox ESR, позволяющая удаленному злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость программного обеспечения SeaMonkey, позволяющая удаленному злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимости браузера Firefox, позволяющие удалённому злоумышленнику вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимости браузера Firefox ESR, позволяющие удалённому злоумышленнику вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимости почтового клиента Thunderbird, позволяющие удалённому злоумышленнику вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
MEDIUM5.0
Уязвимость браузера Firefox ESR, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
MEDIUM5.0
Уязвимость почтового клиента Thunderbird, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
MEDIUM6.4
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику получить доступ к динамической памяти процесса или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику вызвать отказ в обслуживании
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику подделать межсайтовые запросы
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox ESR, позволяющая удалённому злоумышленнику подделать межсайтовые запросы
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, позволяющая удалённому злоумышленнику подделать межсайтовые запросы
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox ESR, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость почтового клиента Thunderbird, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику выполнить произвольный JavaScript-код
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая удалённому злоумышленнику обойти проверку сертификата
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
HIGH7.5
Уязвимость программной платформы Oracle Fusion Middleware, позволяющая удаленному нарушителю подменить RSA-подпись
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код на стороне клиента
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю выполнить произвольный код на стороне клиента
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код на стороне клиента
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю читать данные из неинициализированных областей памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к содержимому ячеек памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю получить доступ к содержимому ячеек памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю получить доступ к содержимому ячеек памяти
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox ESR, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузера Firefox, позволяющая нарушителю повлиять на работу программы
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимость браузера Firefox ESR, позволяющая нарушителю повлиять на работу программы
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю повлиять на работу программы
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимость браузера Firefox, позволяющая нарушителю повлиять на работу программы
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимость браузера Firefox ESR, позволяющая нарушителю повлиять на работу программы
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимость почтового клиента Thunderbird, позволяющая нарушителю повлиять на работу программы
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузера Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимости браузера Firefox, позволяющие нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
HIGH7.5
Уязвимость браузеров Firefox, Firefox ESR и операционной системы Firefox OS позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox, Firefox ESR и операционной системы Firefox OS, позволяющая нарушителю нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox, Firefox ESR и операционной системы Firefox OS, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код при помощи объекта
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимости браузера Firefox, позволяющие нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
MEDIUM5.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти политику разграничения доступа
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
MEDIUM4.6
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю проводить атаки типа "человек посередине"
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM5.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю проводить межсайтовый скриптинг
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM4.3
Уязвимость операционной системы Firefox OS, браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти политику разграничения доступа, читать произвольные файлы и повысить свои привилегии
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти процедуру подтверждения действий пользователем при установке обновления
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к защищаемой информации
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
HIGH7.5
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимости браузера Firefox, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю обойти ограничения доступа к элементам окна
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к защищаемой информации из памяти процесса
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
MEDIUM6.4
Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM5.1
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:PReferences
LOW2.6
Уязвимость браузера Firefox, позволяющая нарушителю подменить содержимое окна
CVSS 2.0LOW 2.6
CVSS:2.0/AV:N/AC:H/Au:N/C:N/I:P/A:NReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузера Firefox, позволяющая нарушителю обойти механизм защиты ECMAScript 5 (ES5) API и выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
HIGH7.5
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти существующие ограничения доступа и выполнить переход по заданному URL
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
MEDIUM6.4
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти механизм защиты CORS
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:NReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие на систему
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти правила ограничения домена и провести межсайтовое выполнение сценариев
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю провести межсайтовое выполнение сценариев
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM5.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти существующие ограничения доступа
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти существующие ограничения доступа
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю обойти существующие ограничения доступа и провести межсайтовое выполнение сценариев
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к защищаемой информации
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
HIGH7.5
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.0
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию, повысить свои привилегии или провести XSS-атаку
CVSS 2.0MEDIUM 4.0
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:NReferences
MEDIUM6.8
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
MEDIUM5.0
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю обойти существующую политику ограничения доступа
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
MEDIUM6.8
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию или обойти существующую политику ограничения доступа
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
CRITICAL10.0
Уязвимость браузера Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании, получить конфиденциальную информацию или оказать другое воздействие
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимости браузера Firefox, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
HIGH7.5
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
MEDIUM4.0
Уязвимость программных платформ Jrockit и Java Platform, позволяющая нарушителю получить доступ на чтение данных или модифицировать данные
CVSS 2.0MEDIUM 4.0
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:NReferences
CRITICAL10.0
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимости браузера Firefox, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю обойти существующую политику ограничения доступа
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании, получить конфиденциальную информацию или выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость программного средства рендеринга Graphite 2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость программного средства рендеринга Graphite 2, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимости браузера Firefox, позволяющие нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL9.3
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
MEDIUM6.8
Уязвимость программного средства рендеринга Graphite 2, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию или обойти существующую политику ограничения доступа
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю подделать адресную строку
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM4.4
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии
CVSS 2.0MEDIUM 4.4
CVSS:2.0/AV:L/AC:M/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
Уязвимость браузеров Firefox ESR и Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM4.3
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю подделать адресную строку
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM4.3
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:PReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию или обойти существующую политику ограничения доступа
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
MEDIUM6.8
Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимости почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимости почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю подменить веб-сайты
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
MEDIUM5.0
Уязвимость браузера Firefox, позволяющая нарушителю обойти существующую политику ограничения доступа и привести к раскрытию информации
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
CRITICAL10.0
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю внести изменения в настройки общего доступа
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю проводить UXSS-атаки
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM4.3
Уязвимость браузера Firefox, позволяющая нарушителю обойти защитный механизм CSP
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
MEDIUM6.8
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM5.1
Уязвимость браузера Firefox, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:PReferences
MEDIUM6.8
Уязвимость браузера Firefox, позволяющая нарушителю выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
MEDIUM5.1
Уязвимость браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL10.0
Уязвимости браузеров Firefox и Firefox ESR, позволяющие нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
HIGH8.8
Уязвимость функции BufferSubData() почтового клиента Thunderbird и браузеров Firefox позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
CVSS 3.xHIGH 8.8
CVSS:3.x/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
HIGH7.3
Уязвимость браузера Mozilla Firefox, вызванная переполнением буфера, позволяющая нарушителю выполнить произвольный код
CVSS 3.xHIGH 7.3
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LCVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
CRITICAL10.0
The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://code.google.com/p/chromium/issues/detail?id=117627
- http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://osvdb.org/81645
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://secunia.com/advisories/48992
- http://www.debian.org/security/2015/dsa-3260
- http://www.mozilla.org/security/announce/2015/mfsa2015-57.html
- http://www.securityfocus.com/bid/53309
- http://www.securitytracker.com/id?1027001
- https://bugzilla.mozilla.org/show_bug.cgi?id=1087565
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75271
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14964
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- http://code.google.com/p/chromium/issues/detail?id=117627
- http://googlechromereleases.blogspot.com/2012/04/stable-channel-update_30.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://osvdb.org/81645
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://secunia.com/advisories/48992
- http://www.debian.org/security/2015/dsa-3260
- http://www.mozilla.org/security/announce/2015/mfsa2015-57.html
- http://www.securityfocus.com/bid/53309
- http://www.securitytracker.com/id?1027001
- https://bugzilla.mozilla.org/show_bug.cgi?id=1087565
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75271
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14964
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
HIGH7.5
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://googlechromereleases.blogspot.com/2014/09/stable-channel-update-for-chrome-os_24.html
- http://googlechromereleases.blogspot.com/2014/09/stable-channel-update_24.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00039.html
- http://rhn.redhat.com/errata/RHSA-2014-1307.html
- http://rhn.redhat.com/errata/RHSA-2014-1354.html
- http://rhn.redhat.com/errata/RHSA-2014-1371.html
- http://secunia.com/advisories/61540
- http://secunia.com/advisories/61574
- http://secunia.com/advisories/61575
- http://secunia.com/advisories/61576
- http://secunia.com/advisories/61583
- http://www.debian.org/security/2014/dsa-3033
- http://www.debian.org/security/2014/dsa-3034
- http://www.debian.org/security/2014/dsa-3037
- http://www.kb.cert.org/vuls/id/772676
- http://www.mozilla.org/security/announce/2014/mfsa2014-73.html
- http://www.novell.com/support/kb/doc.php?id=7015701
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/70116
- http://www.ubuntu.com/usn/USN-2360-1
- http://www.ubuntu.com/usn/USN-2360-2
- http://www.ubuntu.com/usn/USN-2361-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064636
- https://bugzilla.mozilla.org/show_bug.cgi?id=1069405
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96194
- https://security.gentoo.org/glsa/201504-01
- http://googlechromereleases.blogspot.com/2014/09/stable-channel-update-for-chrome-os_24.html
- http://googlechromereleases.blogspot.com/2014/09/stable-channel-update_24.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00039.html
- http://rhn.redhat.com/errata/RHSA-2014-1307.html
- http://rhn.redhat.com/errata/RHSA-2014-1354.html
- http://rhn.redhat.com/errata/RHSA-2014-1371.html
- http://secunia.com/advisories/61540
- http://secunia.com/advisories/61574
- http://secunia.com/advisories/61575
- http://secunia.com/advisories/61576
- http://secunia.com/advisories/61583
- http://www.debian.org/security/2014/dsa-3033
- http://www.debian.org/security/2014/dsa-3034
- http://www.debian.org/security/2014/dsa-3037
- http://www.kb.cert.org/vuls/id/772676
- http://www.mozilla.org/security/announce/2014/mfsa2014-73.html
- http://www.novell.com/support/kb/doc.php?id=7015701
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/70116
- http://www.ubuntu.com/usn/USN-2360-1
- http://www.ubuntu.com/usn/USN-2360-2
- http://www.ubuntu.com/usn/USN-2361-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064636
- https://bugzilla.mozilla.org/show_bug.cgi?id=1069405
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96194
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-74.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70436
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1011354
- https://bugzilla.mozilla.org/show_bug.cgi?id=1061214
- https://bugzilla.mozilla.org/show_bug.cgi?id=1061600
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064346
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072044
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072174
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-74.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70436
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1011354
- https://bugzilla.mozilla.org/show_bug.cgi?id=1061214
- https://bugzilla.mozilla.org/show_bug.cgi?id=1061600
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064346
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072044
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072174
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to improper interaction between threading and garbage collection in the GCRuntime::triggerGC function in js/src/jsgc.cpp, and unknown other vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-74.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70439
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1001994
- https://bugzilla.mozilla.org/show_bug.cgi?id=1018916
- https://bugzilla.mozilla.org/show_bug.cgi?id=1020034
- https://bugzilla.mozilla.org/show_bug.cgi?id=1023035
- https://bugzilla.mozilla.org/show_bug.cgi?id=1032208
- https://bugzilla.mozilla.org/show_bug.cgi?id=1033020
- https://bugzilla.mozilla.org/show_bug.cgi?id=1034230
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-74.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70439
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1001994
- https://bugzilla.mozilla.org/show_bug.cgi?id=1018916
- https://bugzilla.mozilla.org/show_bug.cgi?id=1020034
- https://bugzilla.mozilla.org/show_bug.cgi?id=1023035
- https://bugzilla.mozilla.org/show_bug.cgi?id=1032208
- https://bugzilla.mozilla.org/show_bug.cgi?id=1033020
- https://bugzilla.mozilla.org/show_bug.cgi?id=1034230
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-75.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70430
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1041512
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-75.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70430
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1041512
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.4
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via an invalid custom waveform that triggers a calculation of a negative frequency value.
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-76.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70440
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1012609
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-76.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70440
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1012609
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-77.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70428
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1063327
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-77.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70428
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1063327
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers a sequence of rendering operations for truncated GIF data within a CANVAS element.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-78.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70431
- http://www.securitytracker.com/id/1031028
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1063733
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-78.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70431
- http://www.securitytracker.com/id/1031028
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1063733
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-79.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70426
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1068218
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://rhn.redhat.com/errata/RHSA-2014-1647.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-79.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70426
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1068218
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-80.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70432
- http://www.securitytracker.com/id/1031028
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1049095
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-80.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70432
- http://www.securitytracker.com/id/1031028
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1049095
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.mozilla.org/security/announce/2014/mfsa2014-82.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70424
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1015540
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2014-1635.html
- http://secunia.com/advisories/61854
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.mozilla.org/security/announce/2014/mfsa2014-82.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70424
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- https://advisories.mageia.org/MGASA-2014-0421.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1015540
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-80.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70434
- http://www.securitytracker.com/id/1031028
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1066190
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.mozilla.org/security/announce/2014/mfsa2014-80.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/70434
- http://www.securitytracker.com/id/1031028
- http://www.ubuntu.com/usn/USN-2372-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1066190
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive information from the local camera by maintaining a session after the user tries to discontinue streaming.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-81.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70425
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1062876
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-81.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70425
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1062876
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-81.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70427
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1062981
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://secunia.com/advisories/61387
- http://secunia.com/advisories/62021
- http://secunia.com/advisories/62022
- http://secunia.com/advisories/62023
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
- http://www.mozilla.org/security/announce/2014/mfsa2014-81.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/70427
- http://www.securitytracker.com/id/1031028
- http://www.securitytracker.com/id/1031030
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.ubuntu.com/usn/USN-2373-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1062981
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71391
- https://bugzilla.mozilla.org/show_bug.cgi?id=1042567
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072847
- https://bugzilla.mozilla.org/show_bug.cgi?id=1079729
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080312
- https://bugzilla.mozilla.org/show_bug.cgi?id=1089207
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71391
- https://bugzilla.mozilla.org/show_bug.cgi?id=1042567
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072847
- https://bugzilla.mozilla.org/show_bug.cgi?id=1079729
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080312
- https://bugzilla.mozilla.org/show_bug.cgi?id=1089207
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://www.mozilla.org/security/announce/2014/mfsa2014-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1013001
- https://bugzilla.mozilla.org/show_bug.cgi?id=1023158
- https://bugzilla.mozilla.org/show_bug.cgi?id=1026037
- https://bugzilla.mozilla.org/show_bug.cgi?id=1037830
- https://bugzilla.mozilla.org/show_bug.cgi?id=1048517
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064835
- https://bugzilla.mozilla.org/show_bug.cgi?id=1073577
- https://bugzilla.mozilla.org/show_bug.cgi?id=1075546
- https://bugzilla.mozilla.org/show_bug.cgi?id=1077687
- https://bugzilla.mozilla.org/show_bug.cgi?id=1086842
- https://bugzilla.mozilla.org/show_bug.cgi?id=1096026
- https://security.gentoo.org/glsa/201504-01
- http://www.mozilla.org/security/announce/2014/mfsa2014-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1013001
- https://bugzilla.mozilla.org/show_bug.cgi?id=1023158
- https://bugzilla.mozilla.org/show_bug.cgi?id=1026037
- https://bugzilla.mozilla.org/show_bug.cgi?id=1037830
- https://bugzilla.mozilla.org/show_bug.cgi?id=1048517
- https://bugzilla.mozilla.org/show_bug.cgi?id=1064835
- https://bugzilla.mozilla.org/show_bug.cgi?id=1073577
- https://bugzilla.mozilla.org/show_bug.cgi?id=1075546
- https://bugzilla.mozilla.org/show_bug.cgi?id=1077687
- https://bugzilla.mozilla.org/show_bug.cgi?id=1086842
- https://bugzilla.mozilla.org/show_bug.cgi?id=1096026
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://www.mozilla.org/security/announce/2014/mfsa2014-84.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1043787
- https://security.gentoo.org/glsa/201504-01
- http://www.mozilla.org/security/announce/2014/mfsa2014-84.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1043787
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-85.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71397
- https://bugzilla.mozilla.org/show_bug.cgi?id=1087633
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-85.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71397
- https://bugzilla.mozilla.org/show_bug.cgi?id=1087633
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-87.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71398
- https://bugzilla.mozilla.org/show_bug.cgi?id=1088635
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-87.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71398
- https://bugzilla.mozilla.org/show_bug.cgi?id=1088635
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-88.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71395
- https://bugzilla.mozilla.org/show_bug.cgi?id=1085175
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-88.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71395
- https://bugzilla.mozilla.org/show_bug.cgi?id=1085175
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-89.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71396
- https://bugzilla.mozilla.org/show_bug.cgi?id=1074280
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.debian.org/security/2014/dsa-3090
- http://www.debian.org/security/2014/dsa-3092
- http://www.mozilla.org/security/announce/2014/mfsa2014-89.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/71396
- https://bugzilla.mozilla.org/show_bug.cgi?id=1074280
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://www.mozilla.org/security/announce/2014/mfsa2014-91.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=821573
- https://security.gentoo.org/glsa/201504-01
- http://www.mozilla.org/security/announce/2014/mfsa2014-91.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=821573
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://www.mozilla.org/security/announce/2014/mfsa2014-91.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1050340
- https://security.gentoo.org/glsa/201504-01
- http://www.mozilla.org/security/announce/2014/mfsa2014-91.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1050340
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://linux.oracle.com/errata/ELSA-2015-0047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://rhn.redhat.com/errata/RHSA-2015-0047.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62259
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62274
- http://secunia.com/advisories/62283
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62304
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62315
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.debian.org/security/2015/dsa-3132
- http://www.mozilla.org/security/announce/2014/mfsa2015-01.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72049
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- http://www.ubuntu.com/usn/USN-2460-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1109889
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111737
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99955
- https://security.gentoo.org/glsa/201504-01
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://linux.oracle.com/errata/ELSA-2015-0047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://rhn.redhat.com/errata/RHSA-2015-0047.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62259
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62274
- http://secunia.com/advisories/62283
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62304
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62315
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.debian.org/security/2015/dsa-3132
- http://www.mozilla.org/security/announce/2014/mfsa2015-01.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72049
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- http://www.ubuntu.com/usn/USN-2460-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1109889
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111737
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99955
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-01.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72050
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- https://bugzilla.mozilla.org/show_bug.cgi?id=1026774
- https://bugzilla.mozilla.org/show_bug.cgi?id=1027300
- https://bugzilla.mozilla.org/show_bug.cgi?id=1054538
- https://bugzilla.mozilla.org/show_bug.cgi?id=1067473
- https://bugzilla.mozilla.org/show_bug.cgi?id=1070962
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072130
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072871
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098583
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-01.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72050
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- https://bugzilla.mozilla.org/show_bug.cgi?id=1026774
- https://bugzilla.mozilla.org/show_bug.cgi?id=1027300
- https://bugzilla.mozilla.org/show_bug.cgi?id=1054538
- https://bugzilla.mozilla.org/show_bug.cgi?id=1067473
- https://bugzilla.mozilla.org/show_bug.cgi?id=1070962
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072130
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072871
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098583
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://packetstormsecurity.com/files/130972/Firefox-Proxy-Prototype-Privileged-Javascript-Injection.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-09.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72041
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=987794
- https://community.rapid7.com/community/metasploit/blog/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99964
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://packetstormsecurity.com/files/130972/Firefox-Proxy-Prototype-Privileged-Javascript-Injection.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-09.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72041
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=987794
- https://community.rapid7.com/community/metasploit/blog/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99964
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-02.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72048
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1094536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99957
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-02.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72048
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1094536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99957
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://linux.oracle.com/errata/ELSA-2015-0047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://rhn.redhat.com/errata/RHSA-2015-0047.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62259
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62274
- http://secunia.com/advisories/62283
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62304
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62315
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.debian.org/security/2015/dsa-3132
- http://www.mozilla.org/security/announce/2014/mfsa2015-03.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72047
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- http://www.ubuntu.com/usn/USN-2460-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080987
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99958
- https://security.gentoo.org/glsa/201504-01
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://linux.oracle.com/errata/ELSA-2015-0047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://rhn.redhat.com/errata/RHSA-2015-0047.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62259
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62274
- http://secunia.com/advisories/62283
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62304
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62315
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.debian.org/security/2015/dsa-3132
- http://www.mozilla.org/security/announce/2014/mfsa2015-03.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72047
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- http://www.ubuntu.com/usn/USN-2460-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1080987
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99958
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://linux.oracle.com/errata/ELSA-2015-0047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://rhn.redhat.com/errata/RHSA-2015-0047.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62259
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62274
- http://secunia.com/advisories/62283
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62304
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62315
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.debian.org/security/2015/dsa-3132
- http://www.mozilla.org/security/announce/2014/mfsa2015-04.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72046
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- http://www.ubuntu.com/usn/USN-2460-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1095859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99959
- https://security.gentoo.org/glsa/201504-01
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://linux.oracle.com/errata/ELSA-2015-0047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00071.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://rhn.redhat.com/errata/RHSA-2015-0047.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62259
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62274
- http://secunia.com/advisories/62283
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62304
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62315
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62657
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.debian.org/security/2015/dsa-3132
- http://www.mozilla.org/security/announce/2014/mfsa2015-04.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72046
- http://www.securitytracker.com/id/1031533
- http://www.securitytracker.com/id/1031534
- http://www.ubuntu.com/usn/USN-2460-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1095859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99959
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-05.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72045
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1100409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99960
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-05.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72045
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1100409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99960
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.mozilla.org/security/announce/2014/mfsa2015-06.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72044
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1108455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99961
- https://security.gentoo.org/glsa/201504-01
- http://linux.oracle.com/errata/ELSA-2015-0046.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2015-0046.html
- http://secunia.com/advisories/62237
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62273
- http://secunia.com/advisories/62293
- http://secunia.com/advisories/62313
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.debian.org/security/2015/dsa-3127
- http://www.mozilla.org/security/announce/2014/mfsa2015-06.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72044
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1108455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99961
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-08.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72042
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1079658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99963
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html
- http://secunia.com/advisories/62242
- http://secunia.com/advisories/62250
- http://secunia.com/advisories/62253
- http://secunia.com/advisories/62316
- http://secunia.com/advisories/62418
- http://secunia.com/advisories/62446
- http://secunia.com/advisories/62790
- http://www.mozilla.org/security/announce/2014/mfsa2015-08.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72042
- http://www.securitytracker.com/id/1031533
- https://bugzilla.mozilla.org/show_bug.cgi?id=1079658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99963
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-44.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1032030
- http://www.ubuntu.com/usn/USN-2557-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1148328
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-44.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1032030
- http://www.ubuntu.com/usn/USN-2557-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1148328
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-40.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73455
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146339
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-40.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73455
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146339
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-42.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1124898
- https://security.gentoo.org/glsa/201512-10
- https://www.exploit-db.com/exploits/37958/
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-42.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1124898
- https://security.gentoo.org/glsa/201512-10
- https://www.exploit-db.com/exploits/37958/
HIGH7.5
The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-39.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1134561
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-39.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1134561
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-39.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1134560
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-39.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1134560
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-38.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1135511
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-38.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1135511
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-38.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1099437
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-38.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1099437
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.8
The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-37.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73457
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111834
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-37.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73457
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111834
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-36.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1109552
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-36.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1109552
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.4
The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a denial of service (out-of-bounds read) via an image that is improperly handled during transformation.
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-34.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1132468
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-34.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1031996
- http://www.ubuntu.com/usn/USN-2550-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1132468
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-30.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73466
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1036515
- https://bugzilla.mozilla.org/show_bug.cgi?id=1137326
- https://bugzilla.mozilla.org/show_bug.cgi?id=1138199
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-30.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73466
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1036515
- https://bugzilla.mozilla.org/show_bug.cgi?id=1137326
- https://bugzilla.mozilla.org/show_bug.cgi?id=1138199
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-33.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73461
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1144991
- https://security.gentoo.org/glsa/201512-10
- https://www.exploit-db.com/exploits/37958/
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-0766.html
- http://rhn.redhat.com/errata/RHSA-2015-0771.html
- http://www.debian.org/security/2015/dsa-3211
- http://www.debian.org/security/2015/dsa-3212
- http://www.mozilla.org/security/announce/2015/mfsa2015-33.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73461
- http://www.securitytracker.com/id/1031996
- http://www.securitytracker.com/id/1032000
- http://www.ubuntu.com/usn/USN-2550-1
- http://www.ubuntu.com/usn/USN-2552-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1144991
- https://security.gentoo.org/glsa/201512-10
- https://www.exploit-db.com/exploits/37958/
MEDIUM6.8
The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html
- http://rhn.redhat.com/errata/RHSA-2015-0718.html
- http://www.debian.org/security/2015/dsa-3201
- http://www.mozilla.org/security/announce/2015/mfsa2015-29.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73263
- http://www.securitytracker.com/id/1031958
- http://www.ubuntu.com/usn/USN-2538-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1145255
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html
- http://rhn.redhat.com/errata/RHSA-2015-0718.html
- http://www.debian.org/security/2015/dsa-3201
- http://www.mozilla.org/security/announce/2015/mfsa2015-29.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73263
- http://www.securitytracker.com/id/1031958
- http://www.ubuntu.com/usn/USN-2538-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1145255
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html
- http://rhn.redhat.com/errata/RHSA-2015-0718.html
- http://www.debian.org/security/2015/dsa-3201
- http://www.mozilla.org/security/announce/2015/mfsa2015-28.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73265
- http://www.securitytracker.com/id/1031959
- http://www.ubuntu.com/usn/USN-2538-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1144988
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html
- http://rhn.redhat.com/errata/RHSA-2015-0718.html
- http://www.debian.org/security/2015/dsa-3201
- http://www.mozilla.org/security/announce/2015/mfsa2015-28.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73265
- http://www.securitytracker.com/id/1031959
- http://www.ubuntu.com/usn/USN-2538-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1144988
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-26.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72759
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1079554
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-26.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72759
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1079554
- https://security.gentoo.org/glsa/201504-01
LOW2.6
Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.
CVSS 2.0LOW 2.6
CVSS:2.0/AV:N/AC:H/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-27.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72757
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1125389
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-27.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72757
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1125389
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-25.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72758
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111960
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-25.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72758
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111960
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-24.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72756
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1110557
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-24.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72756
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1110557
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-23.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72754
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098497
- https://github.com/khaledhosny/ots/commit/003c62d28ae438aa8943cb31535563397f838a2c
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-23.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72754
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098497
- https://github.com/khaledhosny/ots/commit/003c62d28ae438aa8943cb31535563397f838a2c
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-22.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72753
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1095925
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-22.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72753
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1095925
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-21.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72751
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1092370
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-21.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72751
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1092370
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-20.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72750
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1092363
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-20.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72750
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1092363
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-19.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72755
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117304
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-19.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72755
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117304
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-18.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72744
- http://www.securitytracker.com/id/1031791
- https://bugzilla.mozilla.org/show_bug.cgi?id=1030667
- https://bugzilla.mozilla.org/show_bug.cgi?id=988675
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-18.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72744
- http://www.securitytracker.com/id/1031791
- https://bugzilla.mozilla.org/show_bug.cgi?id=1030667
- https://bugzilla.mozilla.org/show_bug.cgi?id=988675
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-17.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72741
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1128939
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-17.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72741
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1128939
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-14.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72745
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1110488
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-14.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72745
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1110488
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-16.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72746
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1130541
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-16.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72746
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1130541
- https://security.gentoo.org/glsa/201504-01
MEDIUM5.0
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-13.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72752
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1065909
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-13.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72752
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1065909
- https://security.gentoo.org/glsa/201504-01
MEDIUM4.3
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-15.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72743
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098314
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-15.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72743
- http://www.securitytracker.com/id/1031791
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1098314
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-11.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72748
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072760
- https://bugzilla.mozilla.org/show_bug.cgi?id=1092947
- https://bugzilla.mozilla.org/show_bug.cgi?id=1114058
- https://bugzilla.mozilla.org/show_bug.cgi?id=1114569
- https://bugzilla.mozilla.org/show_bug.cgi?id=1118894
- https://bugzilla.mozilla.org/show_bug.cgi?id=1119019
- https://bugzilla.mozilla.org/show_bug.cgi?id=1122387
- https://bugzilla.mozilla.org/show_bug.cgi?id=1125734
- https://bugzilla.mozilla.org/show_bug.cgi?id=1127206
- https://bugzilla.mozilla.org/show_bug.cgi?id=1127246
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-11.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/72748
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1072760
- https://bugzilla.mozilla.org/show_bug.cgi?id=1092947
- https://bugzilla.mozilla.org/show_bug.cgi?id=1114058
- https://bugzilla.mozilla.org/show_bug.cgi?id=1114569
- https://bugzilla.mozilla.org/show_bug.cgi?id=1118894
- https://bugzilla.mozilla.org/show_bug.cgi?id=1119019
- https://bugzilla.mozilla.org/show_bug.cgi?id=1122387
- https://bugzilla.mozilla.org/show_bug.cgi?id=1125734
- https://bugzilla.mozilla.org/show_bug.cgi?id=1127206
- https://bugzilla.mozilla.org/show_bug.cgi?id=1127246
- https://security.gentoo.org/glsa/201504-01
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-11.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72742
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1096138
- https://bugzilla.mozilla.org/show_bug.cgi?id=1107009
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111243
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111248
- https://bugzilla.mozilla.org/show_bug.cgi?id=1115776
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117406
- https://bugzilla.mozilla.org/show_bug.cgi?id=1119579
- https://bugzilla.mozilla.org/show_bug.cgi?id=1123882
- https://bugzilla.mozilla.org/show_bug.cgi?id=1124018
- https://bugzilla.mozilla.org/show_bug.cgi?id=1128196
- https://security.gentoo.org/glsa/201504-01
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
- http://rhn.redhat.com/errata/RHSA-2015-0265.html
- http://rhn.redhat.com/errata/RHSA-2015-0266.html
- http://rhn.redhat.com/errata/RHSA-2015-0642.html
- http://www.debian.org/security/2015/dsa-3174
- http://www.debian.org/security/2015/dsa-3179
- http://www.mozilla.org/security/announce/2015/mfsa2015-11.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72742
- http://www.securitytracker.com/id/1031791
- http://www.securitytracker.com/id/1031792
- http://www.ubuntu.com/usn/USN-2505-1
- http://www.ubuntu.com/usn/USN-2506-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1096138
- https://bugzilla.mozilla.org/show_bug.cgi?id=1107009
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111243
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111248
- https://bugzilla.mozilla.org/show_bug.cgi?id=1115776
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117406
- https://bugzilla.mozilla.org/show_bug.cgi?id=1119579
- https://bugzilla.mozilla.org/show_bug.cgi?id=1123882
- https://bugzilla.mozilla.org/show_bug.cgi?id=1124018
- https://bugzilla.mozilla.org/show_bug.cgi?id=1128196
- https://security.gentoo.org/glsa/201504-01
MEDIUM6.8
Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted plugin that does not properly complete initialization.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00044.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00046.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-45.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74247
- http://www.securitytracker.com/id/1032171
- http://www.ubuntu.com/usn/USN-2571-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1141081
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00044.html
- http://lists.opensuse.org/opensuse-updates/2015-04/msg00046.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-45.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74247
- http://www.securitytracker.com/id/1032171
- http://www.ubuntu.com/usn/USN-2571-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1141081
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-46.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74615
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1120655
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143299
- https://bugzilla.mozilla.org/show_bug.cgi?id=1151139
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152177
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-46.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74615
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1120655
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143299
- https://bugzilla.mozilla.org/show_bug.cgi?id=1151139
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152177
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-46.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74615
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111251
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117977
- https://bugzilla.mozilla.org/show_bug.cgi?id=1128064
- https://bugzilla.mozilla.org/show_bug.cgi?id=1135066
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143194
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146101
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149526
- https://bugzilla.mozilla.org/show_bug.cgi?id=1153688
- https://bugzilla.mozilla.org/show_bug.cgi?id=1155474
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-46.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74615
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1111251
- https://bugzilla.mozilla.org/show_bug.cgi?id=1117977
- https://bugzilla.mozilla.org/show_bug.cgi?id=1128064
- https://bugzilla.mozilla.org/show_bug.cgi?id=1135066
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143194
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146101
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149526
- https://bugzilla.mozilla.org/show_bug.cgi?id=1153688
- https://bugzilla.mozilla.org/show_bug.cgi?id=1155474
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
MEDIUM6.8
Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-48.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149542
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-48.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149542
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
MEDIUM4.3
Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL, as demonstrated by a private path component.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-49.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1113431
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-49.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1113431
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-50.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152280
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-50.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152280
- https://security.gentoo.org/glsa/201605-06
MEDIUM6.8
Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-51.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1153478
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-51.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1153478
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
MEDIUM6.8
Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-53.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=988698
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-53.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=988698
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-54.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1140537
- https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- https://www.tenable.com/security/tns-2016-20
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://rhn.redhat.com/errata/RHSA-2015-0988.html
- http://rhn.redhat.com/errata/RHSA-2015-1012.html
- http://www.debian.org/security/2015/dsa-3260
- http://www.debian.org/security/2015/dsa-3264
- http://www.mozilla.org/security/announce/2015/mfsa2015-54.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- http://www.ubuntu.com/usn/USN-2603-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1140537
- https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365
- https://security.gentoo.org/glsa/201605-06
- https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7
- https://www.tenable.com/security/tns-2016-20
MEDIUM6.8
Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-55.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154683
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-55.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154683
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-56.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146724
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-56.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- http://www.ubuntu.com/usn/USN-2602-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146724
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.4
The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might allow local users to gain privileges via a Trojan horse file.
CVSS 2.0MEDIUM 4.4
CVSS:2.0/AV:L/AC:M/Au:N/C:P/I:P/A:PReferences
- http://www.mozilla.org/security/announce/2015/mfsa2015-58.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- https://bugzilla.mozilla.org/show_bug.cgi?id=1127481
- http://www.mozilla.org/security/announce/2015/mfsa2015-58.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/74611
- https://bugzilla.mozilla.org/show_bug.cgi?id=1127481
CRITICAL10.0
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-65.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1166924
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-65.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1166924
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143679
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154876
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160884
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164567
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143679
- https://bugzilla.mozilla.org/show_bug.cgi?id=1154876
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160884
- https://bugzilla.mozilla.org/show_bug.cgi?id=1164567
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1056410
- https://bugzilla.mozilla.org/show_bug.cgi?id=1151650
- https://bugzilla.mozilla.org/show_bug.cgi?id=1156861
- https://bugzilla.mozilla.org/show_bug.cgi?id=1159321
- https://bugzilla.mozilla.org/show_bug.cgi?id=1159973
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163359
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163852
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172076
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172397
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1056410
- https://bugzilla.mozilla.org/show_bug.cgi?id=1151650
- https://bugzilla.mozilla.org/show_bug.cgi?id=1156861
- https://bugzilla.mozilla.org/show_bug.cgi?id=1159321
- https://bugzilla.mozilla.org/show_bug.cgi?id=1159973
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163359
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163852
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172076
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172397
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1059081
- https://bugzilla.mozilla.org/show_bug.cgi?id=1132265
- https://bugzilla.mozilla.org/show_bug.cgi?id=1145781
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146416
- https://bugzilla.mozilla.org/show_bug.cgi?id=1155985
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1059081
- https://bugzilla.mozilla.org/show_bug.cgi?id=1132265
- https://bugzilla.mozilla.org/show_bug.cgi?id=1145781
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146416
- https://bugzilla.mozilla.org/show_bug.cgi?id=1155985
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.mozilla.org/security/announce/2015/mfsa2015-61.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1142210
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.mozilla.org/security/announce/2015/mfsa2015-61.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1142210
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-62.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1122218
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-62.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1122218
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.mozilla.org/security/announce/2015/mfsa2015-63.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149891
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.mozilla.org/security/announce/2015/mfsa2015-63.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149891
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-65.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1169867
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-65.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1169867
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1166082
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1166082
- https://security.gentoo.org/glsa/201512-10
CRITICAL9.3
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1166900
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1166900
- https://security.gentoo.org/glsa/201512-10
CRITICAL9.3
The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167888
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167888
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167332
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167332
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167356
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167356
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1168207
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1168207
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170809
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.debian.org/security/2015/dsa-3324
- http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- http://www.ubuntu.com/usn/USN-2673-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170809
- https://security.gentoo.org/glsa/201512-10
MEDIUM4.3
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-67.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1147497
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://rhn.redhat.com/errata/RHSA-2015-1455.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-67.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.securitytracker.com/id/1032784
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1147497
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.mozilla.org/security/announce/2015/mfsa2015-69.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163109
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://rhn.redhat.com/errata/RHSA-2015-1207.html
- http://www.debian.org/security/2015/dsa-3300
- http://www.mozilla.org/security/announce/2015/mfsa2015-69.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- http://www.securityfocus.com/bid/75541
- http://www.securitytracker.com/id/1032783
- http://www.ubuntu.com/usn/USN-2656-1
- http://www.ubuntu.com/usn/USN-2656-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1163109
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-79.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146213
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178890
- https://bugzilla.mozilla.org/show_bug.cgi?id=1182711
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-79.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1146213
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178890
- https://bugzilla.mozilla.org/show_bug.cgi?id=1182711
- https://security.gentoo.org/glsa/201605-06
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-79.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143130
- https://bugzilla.mozilla.org/show_bug.cgi?id=1161719
- https://bugzilla.mozilla.org/show_bug.cgi?id=1177501
- https://bugzilla.mozilla.org/show_bug.cgi?id=1181204
- https://bugzilla.mozilla.org/show_bug.cgi?id=1184068
- https://bugzilla.mozilla.org/show_bug.cgi?id=1188590
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-79.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1143130
- https://bugzilla.mozilla.org/show_bug.cgi?id=1161719
- https://bugzilla.mozilla.org/show_bug.cgi?id=1177501
- https://bugzilla.mozilla.org/show_bug.cgi?id=1181204
- https://bugzilla.mozilla.org/show_bug.cgi?id=1184068
- https://bugzilla.mozilla.org/show_bug.cgi?id=1188590
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-80.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76294
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1175396
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-80.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76294
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1175396
- https://security.gentoo.org/glsa/201605-06
CRITICAL10.0
Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-81.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1179484
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-81.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1179484
- https://security.gentoo.org/glsa/201605-06
MEDIUM5.0
Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-82.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1105914
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-82.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1105914
- https://security.gentoo.org/glsa/201605-06
CRITICAL10.0
Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.zerodayinitiative.com/advisories/ZDI-15-456
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170344
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185115
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.zerodayinitiative.com/advisories/ZDI-15-456
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170344
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185115
- https://security.gentoo.org/glsa/201605-06
CRITICAL9.3
Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1144107
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1144107
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.6
mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka MAR) file.
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-85.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76294
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- https://bugzilla.mozilla.org/show_bug.cgi?id=1184500
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-85.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76294
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- https://bugzilla.mozilla.org/show_bug.cgi?id=1184500
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-86.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76510
- http://www.securitytracker.com/id/1033247
- https://bugzilla.mozilla.org/show_bug.cgi?id=1148732
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-86.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76510
- http://www.securitytracker.com/id/1033247
- https://bugzilla.mozilla.org/show_bug.cgi?id=1148732
- https://security.gentoo.org/glsa/201605-06
MEDIUM5.0
The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of shared memory and accessing (1) an Atomics object or (2) a SharedArrayBuffer object.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-87.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1171540
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-87.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1171540
- https://security.gentoo.org/glsa/201605-06
CRITICAL10.0
Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-89.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1177948
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-89.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1177948
- https://security.gentoo.org/glsa/201605-06
CRITICAL10.0
The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-89.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178148
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-89.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178148
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1171603
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1171603
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1176270
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1176270
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1182723
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://rhn.redhat.com/errata/RHSA-2015-1682.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-90.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.securitytracker.com/id/1033372
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- http://www.ubuntu.com/usn/USN-2712-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1182723
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-91.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1086999
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-91.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1086999
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-92.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76297
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185820
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-92.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76297
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185820
- https://security.gentoo.org/glsa/201605-06
CRITICAL9.3
Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186718
- https://hg.mozilla.org/mozilla-central/rev/a674c7019cb5
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html
- http://rhn.redhat.com/errata/RHSA-2015-1586.html
- http://www.debian.org/security/2015/dsa-3333
- http://www.mozilla.org/security/announce/2015/mfsa2015-83.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1033247
- http://www.ubuntu.com/usn/USN-2702-1
- http://www.ubuntu.com/usn/USN-2702-2
- http://www.ubuntu.com/usn/USN-2702-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186718
- https://hg.mozilla.org/mozilla-central/rev/a674c7019cb5
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://rhn.redhat.com/errata/RHSA-2015-1581.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-78.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76249
- http://www.securitytracker.com/id/1033216
- http://www.ubuntu.com/usn/USN-2707-1
- https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178058
- https://bugzilla.mozilla.org/show_bug.cgi?id=1179262
- https://security.gentoo.org/glsa/201512-10
- https://www.exploit-db.com/exploits/37772/
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html
- http://rhn.redhat.com/errata/RHSA-2015-1581.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-78.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76249
- http://www.securitytracker.com/id/1033216
- http://www.ubuntu.com/usn/USN-2707-1
- https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178058
- https://bugzilla.mozilla.org/show_bug.cgi?id=1179262
- https://security.gentoo.org/glsa/201512-10
- https://www.exploit-db.com/exploits/37772/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4495
CRITICAL9.3
Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://www.mozilla.org/security/announce/2015/mfsa2015-93.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149605
- https://hg.mozilla.org/mozilla-central/rev/87277085561a
- http://www.mozilla.org/security/announce/2015/mfsa2015-93.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1149605
- https://hg.mozilla.org/mozilla-central/rev/87277085561a
HIGH7.5
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2015-1693.html
- http://www.debian.org/security/2015/dsa-3345
- http://www.mozilla.org/security/announce/2015/mfsa2015-95.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76505
- http://www.securitytracker.com/id/1033396
- http://www.ubuntu.com/usn/USN-2723-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1042699
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2015-1693.html
- http://www.debian.org/security/2015/dsa-3345
- http://www.mozilla.org/security/announce/2015/mfsa2015-95.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76505
- http://www.securitytracker.com/id/1033396
- http://www.ubuntu.com/usn/USN-2723-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1042699
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-96.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1044077
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152026
- https://bugzilla.mozilla.org/show_bug.cgi?id=1161063
- https://bugzilla.mozilla.org/show_bug.cgi?id=1181651
- https://bugzilla.mozilla.org/show_bug.cgi?id=1183153
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186962
- https://bugzilla.mozilla.org/show_bug.cgi?id=1201793
- https://bugzilla.mozilla.org/show_bug.cgi?id=1202844
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-96.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1044077
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152026
- https://bugzilla.mozilla.org/show_bug.cgi?id=1161063
- https://bugzilla.mozilla.org/show_bug.cgi?id=1181651
- https://bugzilla.mozilla.org/show_bug.cgi?id=1183153
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186962
- https://bugzilla.mozilla.org/show_bug.cgi?id=1201793
- https://bugzilla.mozilla.org/show_bug.cgi?id=1202844
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-96.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1165706
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186657
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-96.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1165706
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186657
MEDIUM4.3
js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-108.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1105045
- https://hg.mozilla.org/mozilla-central/rev/dc21224de25b
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-108.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1105045
- https://hg.mozilla.org/mozilla-central/rev/dc21224de25b
MEDIUM5.0
The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a navigator.mozTCPSocket.open method call and send method calls, which allows remote TCP servers to obtain sensitive information from process memory by reading packet data, as demonstrated by availability of this API in a Firefox OS application.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-97.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- https://bugzilla.mozilla.org/show_bug.cgi?id=994337
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-97.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- https://bugzilla.mozilla.org/show_bug.cgi?id=994337
MEDIUM6.4
The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image.
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-98.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1132467
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-98.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1132467
MEDIUM6.8
Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-101.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1192226
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-101.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1192226
MEDIUM5.1
The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site.
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-102.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1192401
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-102.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1192401
LOW2.6
Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.
CVSS 2.0LOW 2.6
CVSS:2.0/AV:N/AC:H/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-103.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1195976
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-103.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1195976
HIGH7.5
Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-106.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- http://www.zerodayinitiative.com/advisories/ZDI-15-646
- https://bugzilla.mozilla.org/show_bug.cgi?id=1198435
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-106.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- http://www.zerodayinitiative.com/advisories/ZDI-15-646
- https://bugzilla.mozilla.org/show_bug.cgi?id=1198435
MEDIUM6.8
Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) by leveraging improper interaction between shared workers and the IndexedDB implementation.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-104.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200004
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-104.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200004
MEDIUM6.8
Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-105.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200148
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-105.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200148
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-116.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1107011
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191942
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193038
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204580
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204669
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204700
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205707
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206564
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208665
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209471
- https://bugzilla.mozilla.org/show_bug.cgi?id=1213979
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-116.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1107011
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191942
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193038
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204580
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204669
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204700
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205707
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206564
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208665
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209471
- https://bugzilla.mozilla.org/show_bug.cgi?id=1213979
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-116.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185157
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186160
- https://bugzilla.mozilla.org/show_bug.cgi?id=1196237
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200326
- https://bugzilla.mozilla.org/show_bug.cgi?id=1202677
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205937
- https://bugzilla.mozilla.org/show_bug.cgi?id=969309
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-116.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185157
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186160
- https://bugzilla.mozilla.org/show_bug.cgi?id=1196237
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200326
- https://bugzilla.mozilla.org/show_bug.cgi?id=1202677
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205937
- https://bugzilla.mozilla.org/show_bug.cgi?id=969309
- https://security.gentoo.org/glsa/201512-10
MEDIUM4.3
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-117.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1046421
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-117.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1046421
- https://security.gentoo.org/glsa/201512-10
CRITICAL9.3
Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify immutable properties, and consequently execute arbitrary JavaScript code with chrome privileges, via a crafted web page that does not use ES5 APIs.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-109.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=904886
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-109.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=904886
HIGH7.5
NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1168959
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1168959
MEDIUM4.3
The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-118.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1136692
- https://bugzilla.mozilla.org/show_bug.cgi?id=1182778
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-118.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1136692
- https://bugzilla.mozilla.org/show_bug.cgi?id=1182778
- https://security.gentoo.org/glsa/201512-10
MEDIUM4.3
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-110.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1189814
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-110.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1189814
MEDIUM6.4
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging (1) duplicate cache-key generation or (2) retrieval of a value from an incorrect HTTP Access-Control-* response header.
CVSS 2.0MEDIUM 6.4
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-111.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200856
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200869
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-111.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200856
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200869
HIGH7.5
The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170246
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170246
HIGH7.5
The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170794
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1170794
HIGH7.5
The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172055
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172055
HIGH7.5
The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172189
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1172189
HIGH7.5
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1174479
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1174479
HIGH7.5
The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186725
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186725
HIGH7.5
The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a function call, which might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191463
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://rhn.redhat.com/errata/RHSA-2015-1834.html
- http://rhn.redhat.com/errata/RHSA-2015-1852.html
- http://www.debian.org/security/2015/dsa-3365
- http://www.mozilla.org/security/announce/2015/mfsa2015-112.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/76816
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- http://www.ubuntu.com/usn/USN-2754-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191463
HIGH7.5
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html
- http://rhn.redhat.com/errata/RHSA-2015-1980.html
- http://rhn.redhat.com/errata/RHSA-2015-1981.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2015/mfsa2015-133.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/77416
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034069
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2791-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1192028
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
- https://security.gentoo.org/glsa/201512-10
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html
- http://rhn.redhat.com/errata/RHSA-2015-1980.html
- http://rhn.redhat.com/errata/RHSA-2015-1981.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2015/mfsa2015-133.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/77416
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034069
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2791-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1192028
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
- https://security.gentoo.org/glsa/201512-10
- https://security.gentoo.org/glsa/201605-06
CRITICAL9.8
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PCVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html
- http://rhn.redhat.com/errata/RHSA-2015-1980.html
- http://rhn.redhat.com/errata/RHSA-2015-1981.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2015/mfsa2015-133.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/77416
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034069
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2791-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1202868
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
- https://security.gentoo.org/glsa/201512-10
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html
- http://rhn.redhat.com/errata/RHSA-2015-1980.html
- http://rhn.redhat.com/errata/RHSA-2015-1981.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2015/mfsa2015-133.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/77416
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034069
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2791-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1202868
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
- https://security.gentoo.org/glsa/201512-10
- https://security.gentoo.org/glsa/201605-06
HIGH7.5
Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html
- http://rhn.redhat.com/errata/RHSA-2015-1980.html
- http://rhn.redhat.com/errata/RHSA-2015-1981.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3406
- http://www.mozilla.org/security/announce/2015/mfsa2015-133.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/77415
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034069
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2790-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205157
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
- https://security.gentoo.org/glsa/201512-10
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.html
- http://rhn.redhat.com/errata/RHSA-2015-1980.html
- http://rhn.redhat.com/errata/RHSA-2015-1981.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3406
- http://www.mozilla.org/security/announce/2015/mfsa2015-133.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/77415
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034069
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2790-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bto.bluecoat.com/security-advisory/sa119
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205157
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notes
- https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notes
- https://security.gentoo.org/glsa/201512-10
- https://security.gentoo.org/glsa/201605-06
MEDIUM6.8
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00021.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-115.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/77100
- http://www.securitytracker.com/id/1033820
- http://www.ubuntu.com/usn/USN-2768-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208339
- https://bugzilla.mozilla.org/show_bug.cgi?id=1212669
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00021.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-115.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/77100
- http://www.securitytracker.com/id/1033820
- http://www.ubuntu.com/usn/USN-2768-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208339
- https://bugzilla.mozilla.org/show_bug.cgi?id=1212669
MEDIUM4.3
The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-121.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1195735
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-121.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1195735
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting (XSS) attacks, by appending whitespace characters to an IP address string.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-122.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199430
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-122.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199430
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.8
Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-123.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205900
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-123.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205900
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-127.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1210302
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-127.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1210302
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-128.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1211262
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-128.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1211262
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-129.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1211871
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-129.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1211871
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.8
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.mozilla.org/security/announce/2015/mfsa2015-130.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1140616
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.mozilla.org/security/announce/2015/mfsa2015-130.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1140616
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-132.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204269
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-132.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204269
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1188010
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1188010
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204061
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204061
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204155
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html
- http://rhn.redhat.com/errata/RHSA-2015-1982.html
- http://rhn.redhat.com/errata/RHSA-2015-2519.html
- http://www.debian.org/security/2015/dsa-3393
- http://www.debian.org/security/2015/dsa-3410
- http://www.mozilla.org/security/announce/2015/mfsa2015-131.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77411
- http://www.securitytracker.com/id/1034069
- http://www.ubuntu.com/usn/USN-2785-1
- http://www.ubuntu.com/usn/USN-2819-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1204155
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-134.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1203135
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224100
- https://bugzilla.mozilla.org/show_bug.cgi?id=1225250
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-134.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1203135
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224100
- https://bugzilla.mozilla.org/show_bug.cgi?id=1225250
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-134.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1188105
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193757
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193999
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194002
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194006
- https://bugzilla.mozilla.org/show_bug.cgi?id=1197012
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200580
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207571
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208059
- https://bugzilla.mozilla.org/show_bug.cgi?id=1212305
- https://bugzilla.mozilla.org/show_bug.cgi?id=1219330
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221421
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221904
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-134.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1188105
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193757
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193999
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194002
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194006
- https://bugzilla.mozilla.org/show_bug.cgi?id=1197012
- https://bugzilla.mozilla.org/show_bug.cgi?id=1200580
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207571
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208059
- https://bugzilla.mozilla.org/show_bug.cgi?id=1212305
- https://bugzilla.mozilla.org/show_bug.cgi?id=1219330
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221421
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221904
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font-family name.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-144.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1201183
- https://hg.mozilla.org/mozilla-central/rev/e1bcc04808cc
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-144.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1201183
- https://hg.mozilla.org/mozilla-central/rev/e1bcc04808cc
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.8
Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-135.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1216130
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-135.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1216130
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-145.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1220493
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-145.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1220493
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-136.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185256
- https://github.com/w3c/resource-timing/issues/29
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-136.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1185256
- https://github.com/w3c/resource-timing/issues/29
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-137.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-04.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191423
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-137.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-04.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1191423
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.mozilla.org/security/announce/2015/mfsa2015-138.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79283
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1218326
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.mozilla.org/security/announce/2015/mfsa2015-138.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79283
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1218326
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-141.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221444
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-141.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221444
- https://security.gentoo.org/glsa/201512-10
HIGH7.5
Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-139.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1222809
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-139.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1222809
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.8
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-146.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206211
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-146.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206211
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-149.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228950
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.debian.org/security/2016/dsa-3432
- http://www.mozilla.org/security/announce/2015/mfsa2015-149.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- http://www.ubuntu.com/usn/USN-2859-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228950
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-140.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160890
- https://github.com/whatwg/html/issues/164
- https://github.com/whatwg/html/pull/166
- https://security.gentoo.org/glsa/201512-10
- https://www.w3.org/Bugs/Public/show_bug.cgi?id=28961
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-140.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1160890
- https://github.com/whatwg/html/issues/164
- https://github.com/whatwg/html/pull/166
- https://security.gentoo.org/glsa/201512-10
- https://www.w3.org/Bugs/Public/show_bug.cgi?id=28961
MEDIUM5.0
The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a single-byte header frame that triggers incorrect memory allocation.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-142.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194818
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-142.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194818
- https://security.gentoo.org/glsa/201512-10
MEDIUM5.0
The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-142.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194820
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-142.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1194820
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-144.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178033
- https://hg.mozilla.org/mozilla-central/rev/e4b9e72f934f
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-144.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1178033
- https://hg.mozilla.org/mozilla-central/rev/e4b9e72f934f
- https://security.gentoo.org/glsa/201512-10
CRITICAL10.0
Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a deque size change.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-144.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199400
- https://hg.mozilla.org/mozilla-central/rev/7fd961937687
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-144.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199400
- https://hg.mozilla.org/mozilla-central/rev/7fd961937687
- https://security.gentoo.org/glsa/201512-10
MEDIUM6.8
Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.mozilla.org/security/announce/2015/mfsa2015-147.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1216748
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://rhn.redhat.com/errata/RHSA-2015-2657.html
- http://www.debian.org/security/2015/dsa-3422
- http://www.mozilla.org/security/announce/2015/mfsa2015-147.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/79279
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1216748
- https://security.gentoo.org/glsa/201512-10
MEDIUM4.0
The WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site.
CVSS 2.0MEDIUM 4.0
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:NReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-148.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1226423
- https://security.gentoo.org/glsa/201512-10
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-148.html
- http://www.securityfocus.com/bid/79280
- http://www.securitytracker.com/id/1034426
- http://www.ubuntu.com/usn/USN-2833-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1226423
- https://security.gentoo.org/glsa/201512-10
MEDIUM4.3
Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NReferences
- http://arxiv.org/abs/1502.07373
- http://www.mozilla.org/security/announce/2015/mfsa2015-114.html
- http://www.securitytracker.com/id/1033640
- https://bugzilla.mozilla.org/show_bug.cgi?id=1153672
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167489
- http://arxiv.org/abs/1502.07373
- http://www.mozilla.org/security/announce/2015/mfsa2015-114.html
- http://www.securitytracker.com/id/1033640
- https://bugzilla.mozilla.org/show_bug.cgi?id=1153672
- https://bugzilla.mozilla.org/show_bug.cgi?id=1167489
MEDIUM5.9
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 5.9
CVSS:3.x/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html
- http://rhn.redhat.com/errata/RHSA-2016-0049.html
- http://rhn.redhat.com/errata/RHSA-2016-0050.html
- http://rhn.redhat.com/errata/RHSA-2016-0053.html
- http://rhn.redhat.com/errata/RHSA-2016-0054.html
- http://rhn.redhat.com/errata/RHSA-2016-0055.html
- http://rhn.redhat.com/errata/RHSA-2016-0056.html
- http://www.debian.org/security/2016/dsa-3436
- http://www.debian.org/security/2016/dsa-3437
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3458
- http://www.debian.org/security/2016/dsa-3465
- http://www.debian.org/security/2016/dsa-3491
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2015/mfsa2015-150.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/79684
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034541
- http://www.securitytracker.com/id/1036467
- http://www.ubuntu.com/usn/USN-2863-1
- http://www.ubuntu.com/usn/USN-2864-1
- http://www.ubuntu.com/usn/USN-2865-1
- http://www.ubuntu.com/usn/USN-2866-1
- http://www.ubuntu.com/usn/USN-2884-1
- http://www.ubuntu.com/usn/USN-2904-1
- https://access.redhat.com/errata/RHSA-2016:1430
- https://bugzilla.mozilla.org/show_bug.cgi?id=1158489
- https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes
- https://security.gentoo.org/glsa/201701-46
- https://security.gentoo.org/glsa/201706-18
- https://security.gentoo.org/glsa/201801-15
- https://security.netapp.com/advisory/ntap-20160225-0001/
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00139.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00058.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00059.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00166.html
- http://rhn.redhat.com/errata/RHSA-2016-0049.html
- http://rhn.redhat.com/errata/RHSA-2016-0050.html
- http://rhn.redhat.com/errata/RHSA-2016-0053.html
- http://rhn.redhat.com/errata/RHSA-2016-0054.html
- http://rhn.redhat.com/errata/RHSA-2016-0055.html
- http://rhn.redhat.com/errata/RHSA-2016-0056.html
- http://www.debian.org/security/2016/dsa-3436
- http://www.debian.org/security/2016/dsa-3437
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3458
- http://www.debian.org/security/2016/dsa-3465
- http://www.debian.org/security/2016/dsa-3491
- http://www.debian.org/security/2016/dsa-3688
- http://www.mozilla.org/security/announce/2015/mfsa2015-150.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/79684
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1034541
- http://www.securitytracker.com/id/1036467
- http://www.ubuntu.com/usn/USN-2863-1
- http://www.ubuntu.com/usn/USN-2864-1
- http://www.ubuntu.com/usn/USN-2865-1
- http://www.ubuntu.com/usn/USN-2866-1
- http://www.ubuntu.com/usn/USN-2884-1
- http://www.ubuntu.com/usn/USN-2904-1
- https://access.redhat.com/errata/RHSA-2016:1430
- https://bugzilla.mozilla.org/show_bug.cgi?id=1158489
- https://developer.mozilla.org/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes
- https://security.gentoo.org/glsa/201701-46
- https://security.gentoo.org/glsa/201706-18
- https://security.gentoo.org/glsa/201801-15
- https://security.netapp.com/advisory/ntap-20160225-0001/
HIGH8.8
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html
- http://rhn.redhat.com/errata/RHSA-2016-0197.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
- http://rhn.redhat.com/errata/RHSA-2016-0594.html
- http://www.debian.org/security/2016/dsa-3479
- http://www.mozilla.org/security/announce/2016/mfsa2016-14.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/82991
- http://www.ubuntu.com/usn/USN-2902-1
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- https://security.gentoo.org/glsa/201701-35
- https://security.gentoo.org/glsa/201701-63
- http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html
- http://rhn.redhat.com/errata/RHSA-2016-0197.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
- http://rhn.redhat.com/errata/RHSA-2016-0594.html
- http://www.debian.org/security/2016/dsa-3479
- http://www.mozilla.org/security/announce/2016/mfsa2016-14.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/82991
- http://www.ubuntu.com/usn/USN-2902-1
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- https://security.gentoo.org/glsa/201701-35
- https://security.gentoo.org/glsa/201701-63
CRITICAL9.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2016-0071.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3491
- http://www.mozilla.org/security/announce/2016/mfsa2016-01.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81953
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- http://www.ubuntu.com/usn/USN-2904-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221385
- https://bugzilla.mozilla.org/show_bug.cgi?id=1223670
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224200
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230483
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230639
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230668
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230686
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233152
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233346
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233925
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234280
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234571
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2016-0071.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3491
- http://www.mozilla.org/security/announce/2016/mfsa2016-01.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81953
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- http://www.ubuntu.com/usn/USN-2904-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221385
- https://bugzilla.mozilla.org/show_bug.cgi?id=1223670
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224200
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230483
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230639
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230668
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230686
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233152
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233346
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233925
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234280
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234571
- https://security.gentoo.org/glsa/201605-06
CRITICAL10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xCRITICAL 10.0
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-01.html
- http://www.securityfocus.com/bid/81953
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1180064
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186973
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206675
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207298
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209358
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209365
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209366
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209368
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209546
- https://bugzilla.mozilla.org/show_bug.cgi?id=1222015
- https://bugzilla.mozilla.org/show_bug.cgi?id=1229825
- https://bugzilla.mozilla.org/show_bug.cgi?id=1231121
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234576
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-01.html
- http://www.securityfocus.com/bid/81953
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1180064
- https://bugzilla.mozilla.org/show_bug.cgi?id=1186973
- https://bugzilla.mozilla.org/show_bug.cgi?id=1206675
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207298
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209358
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209365
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209366
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209368
- https://bugzilla.mozilla.org/show_bug.cgi?id=1209546
- https://bugzilla.mozilla.org/show_bug.cgi?id=1222015
- https://bugzilla.mozilla.org/show_bug.cgi?id=1229825
- https://bugzilla.mozilla.org/show_bug.cgi?id=1231121
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234576
- https://security.gentoo.org/glsa/201605-06
MEDIUM6.5
Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:PCVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-02.html
- http://www.securityfocus.com/bid/81956
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1231761
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-02.html
- http://www.securityfocus.com/bid/81956
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1231761
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2016-0071.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3491
- http://www.mozilla.org/security/announce/2016/mfsa2016-03.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81952
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- http://www.ubuntu.com/usn/USN-2904-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1220450
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00101.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00105.html
- http://rhn.redhat.com/errata/RHSA-2016-0071.html
- http://rhn.redhat.com/errata/RHSA-2016-0258.html
- http://www.debian.org/security/2016/dsa-3457
- http://www.debian.org/security/2016/dsa-3491
- http://www.mozilla.org/security/announce/2016/mfsa2016-03.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81952
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- http://www.ubuntu.com/usn/USN-2904-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1220450
- https://security.gentoo.org/glsa/201605-06
MEDIUM6.1
The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 6.1
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-06.html
- http://www.securityfocus.com/bid/81957
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=724353
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-06.html
- http://www.securityfocus.com/bid/81957
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=724353
- https://security.gentoo.org/glsa/201605-06
MEDIUM5.3
Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208.
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:NCVSS 3.xMEDIUM 5.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-04.html
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233784
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-04.html
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1233784
- https://security.gentoo.org/glsa/201605-06
HIGH7.4
Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xHIGH 7.4
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-09.html
- http://www.securityfocus.com/bid/81948
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1189082
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-09.html
- http://www.securityfocus.com/bid/81948
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1189082
- https://security.gentoo.org/glsa/201605-06
CRITICAL9.8
The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-10.html
- http://www.securityfocus.com/bid/81950
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1232069
- https://hg.mozilla.org/mozilla-central/rev/2a57c0a0cf19
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-10.html
- http://www.securityfocus.com/bid/81950
- http://www.securitytracker.com/id/1034825
- http://www.ubuntu.com/usn/USN-2880-1
- http://www.ubuntu.com/usn/USN-2880-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=1232069
- https://hg.mozilla.org/mozilla-central/rev/2a57c0a0cf19
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00102.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00142.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-13.html
- http://www.securitytracker.com/id/1035007
- http://www.ubuntu.com/usn/USN-2893-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245724
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00102.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00142.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-13.html
- http://www.securitytracker.com/id/1035007
- http://www.ubuntu.com/usn/USN-2893-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245724
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.mozilla.org/security/announce/2016/mfsa2016-16.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1123661
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221872
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224979
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234578
- https://bugzilla.mozilla.org/show_bug.cgi?id=1241217
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242279
- https://bugzilla.mozilla.org/show_bug.cgi?id=1244250
- https://bugzilla.mozilla.org/show_bug.cgi?id=1244995
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249685
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.mozilla.org/security/announce/2016/mfsa2016-16.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1123661
- https://bugzilla.mozilla.org/show_bug.cgi?id=1221872
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224979
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234578
- https://bugzilla.mozilla.org/show_bug.cgi?id=1241217
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242279
- https://bugzilla.mozilla.org/show_bug.cgi?id=1244250
- https://bugzilla.mozilla.org/show_bug.cgi?id=1244995
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249685
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-16.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199171
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205163
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207958
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224361
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224363
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224369
- https://bugzilla.mozilla.org/show_bug.cgi?id=1225618
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234425
- https://bugzilla.mozilla.org/show_bug.cgi?id=1236519
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238558
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238935
- https://bugzilla.mozilla.org/show_bug.cgi?id=1241731
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243555
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243583
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245866
- https://bugzilla.mozilla.org/show_bug.cgi?id=1247236
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248794
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-16.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1199171
- https://bugzilla.mozilla.org/show_bug.cgi?id=1205163
- https://bugzilla.mozilla.org/show_bug.cgi?id=1207958
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224361
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224363
- https://bugzilla.mozilla.org/show_bug.cgi?id=1224369
- https://bugzilla.mozilla.org/show_bug.cgi?id=1225618
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234425
- https://bugzilla.mozilla.org/show_bug.cgi?id=1236519
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238558
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238935
- https://bugzilla.mozilla.org/show_bug.cgi?id=1241731
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243555
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243583
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245866
- https://bugzilla.mozilla.org/show_bug.cgi?id=1247236
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248794
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-17.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243178
- https://security.gentoo.org/glsa/201605-06
- http://hg.mozilla.org/releases/mozilla-release/rev/5154bb929236
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-17.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243178
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NCVSS 3.xMEDIUM 4.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-18.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208946
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-18.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1208946
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:PCVSS 3.xMEDIUM 4.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-20.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1227052
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-20.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1227052
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 4.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NReferences
- http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.mozilla.org/security/announce/2016/mfsa2016-21.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228754
- https://security.gentoo.org/glsa/201605-06
- http://hg.mozilla.org/releases/mozilla-release/rev/80ce3f1ffe03
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.mozilla.org/security/announce/2016/mfsa2016-21.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228754
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-22.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234949
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-22.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1234949
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-23.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- http://zerodayinitiative.com/advisories/ZDI-16-198/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246014
- https://security.gentoo.org/glsa/201605-06
- https://www.exploit-db.com/exploits/42484/
- https://www.exploit-db.com/exploits/44294/
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-23.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- http://zerodayinitiative.com/advisories/ZDI-16-198/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246014
- https://security.gentoo.org/glsa/201605-06
- https://www.exploit-db.com/exploits/42484/
- https://www.exploit-db.com/exploits/44294/
HIGH8.8
Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-24.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- http://zerodayinitiative.com/advisories/ZDI-16-199/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249377
- https://security.gentoo.org/glsa/201605-06
- http://hg.mozilla.org/releases/mozilla-release/rev/b208427885d3
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-24.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- http://zerodayinitiative.com/advisories/ZDI-16-199/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249377
- https://security.gentoo.org/glsa/201605-06
CRITICAL9.8
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-25.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1240760
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-25.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1240760
- https://security.gentoo.org/glsa/201605-06
HIGH7.4
The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.
CVSS 2.0MEDIUM 4.4
CVSS:2.0/AV:L/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 7.4
CVSS:3.x/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-26.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238440
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-26.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238440
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-27.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243335
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-27.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243335
- https://security.gentoo.org/glsa/201605-06
MEDIUM4.3
Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 4.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.mozilla.org/security/announce/2016/mfsa2016-28.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245264
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.mozilla.org/security/announce/2016/mfsa2016-28.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1245264
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-31.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246054
- https://security.gentoo.org/glsa/201605-06
- http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-31.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246054
- https://security.gentoo.org/glsa/201605-06
MEDIUM6.5
Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:NCVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-29.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246956
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-29.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246956
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-30.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246742
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-30.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246742
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://www.mozilla.org/security/announce/2016/mfsa2016-38.html
- http://www.securitytracker.com/id/1035215
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242322
- https://security.gentoo.org/glsa/201605-06
- http://www.mozilla.org/security/announce/2016/mfsa2016-38.html
- http://www.securitytracker.com/id/1035215
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242322
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-33.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1219339
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-33.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1219339
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-34.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228103
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-34.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228103
- https://security.gentoo.org/glsa/201605-06
MEDIUM6.3
Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xMEDIUM 6.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LReferences
- http://hg.mozilla.org/releases/mozilla-release/rev/bafc86c12e63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-32.html
- http://www.securityfocus.com/bid/84220
- http://www.securitytracker.com/id/1035215
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230768
- https://security.gentoo.org/glsa/201605-06
- http://hg.mozilla.org/releases/mozilla-release/rev/bafc86c12e63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-32.html
- http://www.securityfocus.com/bid/84220
- http://www.securitytracker.com/id/1035215
- https://bugzilla.mozilla.org/show_bug.cgi?id=1230768
- https://security.gentoo.org/glsa/201605-06
HIGH8.8
The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248876
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248876
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243464
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243464
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243473
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243473
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243482
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243482
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243513
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243513
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243526
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243526
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243597
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243597
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243816
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243816
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243823
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243823
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248805
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248805
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249081
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249081
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249338
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249338
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249920
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249920
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248804
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://www.debian.org/security/2016/dsa-3510
- http://www.debian.org/security/2016/dsa-3515
- http://www.debian.org/security/2016/dsa-3520
- http://www.mozilla.org/security/announce/2016/mfsa2016-37.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84222
- http://www.securitytracker.com/id/1035215
- http://www.ubuntu.com/usn/USN-2917-1
- http://www.ubuntu.com/usn/USN-2917-2
- http://www.ubuntu.com/usn/USN-2917-3
- http://www.ubuntu.com/usn/USN-2927-1
- http://www.ubuntu.com/usn/USN-2934-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1248804
- https://security.gentoo.org/glsa/201605-06
- https://security.gentoo.org/glsa/201701-63
HIGH8.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1141382
- https://bugzilla.mozilla.org/show_bug.cgi?id=1155328
- https://bugzilla.mozilla.org/show_bug.cgi?id=1229855
- https://bugzilla.mozilla.org/show_bug.cgi?id=1240880
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249183
- https://bugzilla.mozilla.org/show_bug.cgi?id=1255298
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1141382
- https://bugzilla.mozilla.org/show_bug.cgi?id=1155328
- https://bugzilla.mozilla.org/show_bug.cgi?id=1229855
- https://bugzilla.mozilla.org/show_bug.cgi?id=1240880
- https://bugzilla.mozilla.org/show_bug.cgi?id=1249183
- https://bugzilla.mozilla.org/show_bug.cgi?id=1255298
- https://security.gentoo.org/glsa/201701-15
HIGH8.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://www.debian.org/security/2016/dsa-3601
- http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1212328
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228882
- https://bugzilla.mozilla.org/show_bug.cgi?id=1231919
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238592
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242668
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242810
- https://bugzilla.mozilla.org/show_bug.cgi?id=1251922
- https://bugzilla.mozilla.org/show_bug.cgi?id=1253099
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254122
- https://bugzilla.mozilla.org/show_bug.cgi?id=1255949
- https://bugzilla.mozilla.org/show_bug.cgi?id=1256065
- https://bugzilla.mozilla.org/show_bug.cgi?id=1258231
- https://bugzilla.mozilla.org/show_bug.cgi?id=1260439
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://www.debian.org/security/2016/dsa-3601
- http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1212328
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228882
- https://bugzilla.mozilla.org/show_bug.cgi?id=1231919
- https://bugzilla.mozilla.org/show_bug.cgi?id=1238592
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242668
- https://bugzilla.mozilla.org/show_bug.cgi?id=1242810
- https://bugzilla.mozilla.org/show_bug.cgi?id=1251922
- https://bugzilla.mozilla.org/show_bug.cgi?id=1253099
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254122
- https://bugzilla.mozilla.org/show_bug.cgi?id=1255949
- https://bugzilla.mozilla.org/show_bug.cgi?id=1256065
- https://bugzilla.mozilla.org/show_bug.cgi?id=1258231
- https://bugzilla.mozilla.org/show_bug.cgi?id=1260439
- https://security.gentoo.org/glsa/201701-15
HIGH8.8
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://rhn.redhat.com/errata/RHSA-2016-1041.html
- http://www.debian.org/security/2016/dsa-3559
- http://www.debian.org/security/2016/dsa-3576
- http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- http://www.ubuntu.com/usn/USN-2973-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1187420
- https://bugzilla.mozilla.org/show_bug.cgi?id=1252707
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254164
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254622
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254876
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://rhn.redhat.com/errata/RHSA-2016-1041.html
- http://www.debian.org/security/2016/dsa-3559
- http://www.debian.org/security/2016/dsa-3576
- http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- http://www.ubuntu.com/usn/USN-2973-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=1187420
- https://bugzilla.mozilla.org/show_bug.cgi?id=1252707
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254164
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254622
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254876
- https://security.gentoo.org/glsa/201701-15
HIGH7.5
The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service (generation-count overflow, out-of-bounds HashMap write access, and application crash) via a crafted web site.
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://www.debian.org/security/2016/dsa-3559
- http://www.mozilla.org/security/announce/2016/mfsa2016-47.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246061
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://www.debian.org/security/2016/dsa-3559
- http://www.mozilla.org/security/announce/2016/mfsa2016-47.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1246061
- https://security.gentoo.org/glsa/201701-15
HIGH8.8
Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-42.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1252330
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-42.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1252330
- https://security.gentoo.org/glsa/201701-15
HIGH7.5
Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
CVSS 2.0MEDIUM 5.1
CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-42.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1261776
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-42.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1261776
- https://security.gentoo.org/glsa/201701-15
HIGH8.8
Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://www.debian.org/security/2016/dsa-3559
- http://www.mozilla.org/security/announce/2016/mfsa2016-44.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254721
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://rhn.redhat.com/errata/RHSA-2016-0695.html
- http://www.debian.org/security/2016/dsa-3559
- http://www.mozilla.org/security/announce/2016/mfsa2016-44.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254721
- https://security.gentoo.org/glsa/201701-15
MEDIUM6.5
Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-45.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1223743
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-45.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1223743
- https://security.gentoo.org/glsa/201701-15
MEDIUM5.4
The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 5.4
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-46.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1227462
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-46.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=1227462
- https://security.gentoo.org/glsa/201701-15
MEDIUM4.3
The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NCVSS 3.xMEDIUM 4.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NReferences
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-48.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=870870
- https://security.gentoo.org/glsa/201701-15
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-48.html
- http://www.securitytracker.com/id/1035692
- http://www.ubuntu.com/usn/USN-2936-1
- http://www.ubuntu.com/usn/USN-2936-2
- http://www.ubuntu.com/usn/USN-2936-3
- https://bugzilla.mozilla.org/show_bug.cgi?id=870870
- https://security.gentoo.org/glsa/201701-15
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE