Lucene search

K
freebsdFreeBSD99029172-8253-407D-9D8B-2CFEAB9ABF81
HistoryFeb 24, 2015 - 12:00 a.m.

mozilla -- multiple vulnerabilities

2015-02-2400:00:00
vuxml.freebsd.org
15

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.8%

The Mozilla Project reports:

MFSA-2015-11 Miscellaneous memory safety hazards (rv:36.0
/ rv:31.5)
MFSA-2015-12 Invoking Mozilla updater will load locally
stored DLL files
MFSA-2015-13 Appended period to hostnames can bypass HPKP
and HSTS protections
MFSA-2015-14 Malicious WebGL content crash when writing
strings
MFSA-2015-15 TLS TURN and STUN connections silently fail
to simple TCP connections
MFSA-2015-16 Use-after-free in IndexedDB
MFSA-2015-17 Buffer overflow in libstagefright during MP4
video playback
MFSA-2015-18 Double-free when using non-default memory
allocators with a zero-length XHR
MFSA-2015-19 Out-of-bounds read and write while rendering
SVG content
MFSA-2015-20 Buffer overflow during CSS restyling
MFSA-2015-21 Buffer underflow during MP3 playback
MFSA-2015-22 Crash using DrawTarget in Cairo graphics
library
MFSA-2015-23 Use-after-free in Developer Console date
with OpenType Sanitiser
MFSA-2015-24 Reading of local files through manipulation
of form autocomplete
MFSA-2015-25 Local files or privileged URLs in pages can
be opened into new tabs
MFSA-2015-26 UI Tour whitelisted sites in background tab
can spoof foreground tabs
MFSA-2015-27 Caja Compiler JavaScript sandbox bypass

References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.8%