Lucene search

[email protected]CVE-2015-7202

HistoryDec 16, 2015 - 11:59 a.m.

CVE-2015-7202

2015-12-1611:59:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2015-7202

mozilla firefox

browser engine

denial of service

memory corruption

application crash

arbitrary code execution

nvd

8.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.051 Low

EPSS

Percentile

93.0%

JSON

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected configurations

NVD

Node

mozillafirefoxRange≤42.0

Node

opensuseleapMatch42.1

opensuseopensuseMatch13.1

opensuseopensuseMatch13.2

Node

fedoraprojectfedoraMatch22

fedoraprojectfedoraMatch23

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle42.0

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	le	42.0

References

lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html

lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html

lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html

lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html

lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html

lists.opensuse.org/opensuse-updates/2015-12/msg00104.html

lists.opensuse.org/opensuse-updates/2016-02/msg00007.html

lists.opensuse.org/opensuse-updates/2016-02/msg00008.html

www.mozilla.org/security/announce/2015/mfsa2015-134.html

www.securityfocus.com/bid/79279

www.securitytracker.com/id/1034426

www.ubuntu.com/usn/USN-2833-1

bugzilla.mozilla.org/show_bug.cgi?id=1188105

bugzilla.mozilla.org/show_bug.cgi?id=1193757

bugzilla.mozilla.org/show_bug.cgi?id=1193999

bugzilla.mozilla.org/show_bug.cgi?id=1194002

bugzilla.mozilla.org/show_bug.cgi?id=1194006

bugzilla.mozilla.org/show_bug.cgi?id=1197012

bugzilla.mozilla.org/show_bug.cgi?id=1200580

bugzilla.mozilla.org/show_bug.cgi?id=1207571

bugzilla.mozilla.org/show_bug.cgi?id=1208059

bugzilla.mozilla.org/show_bug.cgi?id=1212305

bugzilla.mozilla.org/show_bug.cgi?id=1219330

bugzilla.mozilla.org/show_bug.cgi?id=1221421

bugzilla.mozilla.org/show_bug.cgi?id=1221904

security.gentoo.org/glsa/201512-10

8.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.051 Low

EPSS

Percentile

93.0%

JSON

Related for CVE-2015-7202

prion1 ubuntucve1 cvelist1 nvd1 openvas12 mozilla1 suse3 nessus14 freebsd1 ubuntu1 archlinux1 kaspersky1 mageia1 gentoo1