7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.066 Low
EPSS
Percentile
93.7%
Debian Security Advisory DSA-3211-1 [email protected]
http://www.debian.org/security/ Salvatore Bonaccorso
April 01, 2015 http://www.debian.org/security/faq
Package : iceweasel
CVE ID : CVE-2015-0801 CVE-2015-0807 CVE-2015-0813 CVE-2015-0815
CVE-2015-0816
Multiple security issues have been found in Iceweasel, Debian's version
of the Mozilla Firefox web browser: Multiple memory safety errors,
use-after-frees and other implementation errors may lead to the
execution of arbitrary code, the bypass of security restrictions, denial
of service or cross-site request forgery.
For the stable distribution (wheezy), these problems have been fixed in
version 31.6.0esr-1~deb7u1.
For the unstable distribution (sid), these problems have been fixed in
version 31.6.0esr-1.
We recommend that you upgrade your iceweasel packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | armel | icedove | < 31.6.0-1~deb7u1 | icedove_31.6.0-1~deb7u1_armel.deb |
Debian | 7 | all | iceweasel-l10n-br | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-br_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-fy-nl | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-fy-nl_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-an | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-an_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-ms | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-ms_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-or | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-or_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-bn-in | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-bn-in_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-is | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-is_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | all | iceweasel-l10n-fr | < 1:31.6.0esr-1~deb7u1 | iceweasel-l10n-fr_1:31.6.0esr-1~deb7u1_all.deb |
Debian | 7 | amd64 | icedove-dev | < 31.6.0-1~deb7u1 | icedove-dev_31.6.0-1~deb7u1_amd64.deb |