CVE-2015-2725

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-2725
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
http://rhn.redhat.com/errata/RHSA-2015-1207.html
http://rhn.redhat.com/errata/RHSA-2015-1455.html
http://www.mozilla.org/security/announce/2015/mfsa2015-59.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Third Party Advisory
http://www.securityfocus.com/bid/75541
http://www.securitytracker.com/id/1032783
http://www.securitytracker.com/id/1032784
http://www.ubuntu.com/usn/USN-2656-1
http://www.ubuntu.com/usn/USN-2656-2
https://bugzilla.mozilla.org/show_bug.cgi?id=1056410 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1151650 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1156861 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1159321 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1159973 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1163359 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1163852 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1172076 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1172397 Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/201512-10
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
http://rhn.redhat.com/errata/RHSA-2015-1207.html
http://rhn.redhat.com/errata/RHSA-2015-1455.html
http://www.mozilla.org/security/announce/2015/mfsa2015-59.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html Third Party Advisory
http://www.securityfocus.com/bid/75541
http://www.securitytracker.com/id/1032783
http://www.securitytracker.com/id/1032784
http://www.ubuntu.com/usn/USN-2656-1
http://www.ubuntu.com/usn/USN-2656-2
https://bugzilla.mozilla.org/show_bug.cgi?id=1056410 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1151650 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1156861 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1159321 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1159973 Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1163359 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1163852 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1172076 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1172397 Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/201512-10
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.3.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.5.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.5.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.6.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.7.0:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:27

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - () http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html -
References () http://rhn.redhat.com/errata/RHSA-2015-1207.html - () http://rhn.redhat.com/errata/RHSA-2015-1207.html -
References () http://rhn.redhat.com/errata/RHSA-2015-1455.html - () http://rhn.redhat.com/errata/RHSA-2015-1455.html -
References () http://www.mozilla.org/security/announce/2015/mfsa2015-59.html - Vendor Advisory () http://www.mozilla.org/security/announce/2015/mfsa2015-59.html - Vendor Advisory
References () http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - Third Party Advisory () http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - Third Party Advisory
References () http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - Third Party Advisory () http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - Third Party Advisory
References () http://www.securityfocus.com/bid/75541 - () http://www.securityfocus.com/bid/75541 -
References () http://www.securitytracker.com/id/1032783 - () http://www.securitytracker.com/id/1032783 -
References () http://www.securitytracker.com/id/1032784 - () http://www.securitytracker.com/id/1032784 -
References () http://www.ubuntu.com/usn/USN-2656-1 - () http://www.ubuntu.com/usn/USN-2656-1 -
References () http://www.ubuntu.com/usn/USN-2656-2 - () http://www.ubuntu.com/usn/USN-2656-2 -
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1056410 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1056410 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1151650 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1151650 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1156861 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1156861 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1159321 - Issue Tracking () https://bugzilla.mozilla.org/show_bug.cgi?id=1159321 - Issue Tracking
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1159973 - Issue Tracking () https://bugzilla.mozilla.org/show_bug.cgi?id=1159973 - Issue Tracking
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1163359 - Vendor Advisory, Issue Tracking () https://bugzilla.mozilla.org/show_bug.cgi?id=1163359 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1163852 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1163852 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1172076 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1172076 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1172397 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1172397 - Issue Tracking, Vendor Advisory
References () https://security.gentoo.org/glsa/201512-10 - () https://security.gentoo.org/glsa/201512-10 -

22 Oct 2024, 13:54

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:31.5.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:31.5.1:*:*:*:*:*:*:*

22 Oct 2024, 13:42

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:38.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*

21 Oct 2024, 13:55

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:31.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*		 cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*

21 Oct 2024, 13:11

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:31.3.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:31.5.3:*:*:*:*:*:*:*		 cpe:2.3:a:mozilla:firefox:31.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.3.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.5.3:*:*:*:*:*:*:*
Information

Published : 2015-07-06 02:00

Updated : 2025-04-12 10:46

NVD link : CVE-2015-2725

Mitre link : CVE-2015-2725

CVE.ORG link : CVE-2015-2725

JSON object : View

Products Affected

novell

  • suse_linux_enterprise_server
  • suse_linux_enterprise_desktop
  • suse_linux_enterprise_software_development_kit

oracle

  • solaris

mozilla

  • thunderbird
  • firefox_esr
  • firefox
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer