CVE-2015-7196

2015-11-0505:59:20

CWE-17

mozilla

web.nvd.nist.gov

cve-2015-7196

mozilla firefox

firefox esr

java plugin

remote code execution

denial of service

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.6

Confidence

High

EPSS

0.09

Percentile

94.7%

JSON

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.

Affected configurations

Nvd

Node

mozillafirefoxRange≤41.0.2

Node

mozillafirefox_esrMatch38.0

mozillafirefox_esrMatch38.0.1

mozillafirefox_esrMatch38.0.5

mozillafirefox_esrMatch38.1.0

mozillafirefox_esrMatch38.1.1

mozillafirefox_esrMatch38.2.0

mozillafirefox_esrMatch38.2.1

mozillafirefox_esrMatch38.3.0

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillafirefox_esr38.0cpe:2.3:a:mozilla:firefox_esr:38.0:*:*:*:*:*:*:*
mozillafirefox_esr38.0.1cpe:2.3:a:mozilla:firefox_esr:38.0.1:*:*:*:*:*:*:*
mozillafirefox_esr38.0.5cpe:2.3:a:mozilla:firefox_esr:38.0.5:*:*:*:*:*:*:*
mozillafirefox_esr38.1.0cpe:2.3:a:mozilla:firefox_esr:38.1.0:*:*:*:*:*:*:*
mozillafirefox_esr38.1.1cpe:2.3:a:mozilla:firefox_esr:38.1.1:*:*:*:*:*:*:*
mozillafirefox_esr38.2.0cpe:2.3:a:mozilla:firefox_esr:38.2.0:*:*:*:*:*:*:*
mozillafirefox_esr38.2.1cpe:2.3:a:mozilla:firefox_esr:38.2.1:*:*:*:*:*:*:*
mozillafirefox_esr38.3.0cpe:2.3:a:mozilla:firefox_esr:38.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
mozilla	firefox_esr	38.0	cpe:2.3:a:mozilla:firefox_esr:38.0:::::::*
mozilla	firefox_esr	38.0.1	cpe:2.3:a:mozilla:firefox_esr:38.0.1:::::::*
mozilla	firefox_esr	38.0.5	cpe:2.3:a:mozilla:firefox_esr:38.0.5:::::::*
mozilla	firefox_esr	38.1.0	cpe:2.3:a:mozilla:firefox_esr:38.1.0:::::::*
mozilla	firefox_esr	38.1.1	cpe:2.3:a:mozilla:firefox_esr:38.1.1:::::::*
mozilla	firefox_esr	38.2.0	cpe:2.3:a:mozilla:firefox_esr:38.2.0:::::::*
mozilla	firefox_esr	38.2.1	cpe:2.3:a:mozilla:firefox_esr:38.2.1:::::::*
mozilla	firefox_esr	38.3.0	cpe:2.3:a:mozilla:firefox_esr:38.3.0:::::::*