7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.049 Low
EPSS
Percentile
91.9%
Jesse Ruderman, Mats Palmgren, Byron Campen, and Steve Fink reported
memory safety problems and crashes that affect Firefox ESR 31.6 and
Firefox 37.
Gary Kwong, Andrew McCreight, Christian Holler, Jesse Ruderman, Mats
Palmgren, Jon Coppeard, and Milan Sreckovic reported memory safety
problems and crashes that affect Firefox 37.
Using the Address Sanitizer tool, security researcher Atte Kettunen
found a buffer overflow during the rendering of SVG format graphics when
combined with specific CSS properties on a page. This results in a
potentially exploitable crash.
Security researcher Scott Bell used the Address Sanitizer tool to
discover a use-after-free error during the processing of text when
vertical text is enabled. This leads to a potentially exploitable crash.
Security researcher Ucha Gobejishvili used the Address Sanitizer tool to
find a buffer overflow while parsing compressed XML content. This was
due to an error in how buffer space is created and modified when
handling large amounts of XML data. This results in a potentially
exploitable crash.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
any | any | any | thunderbird | < 31.7.0-1 | UNKNOWN |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716
www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7