Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10464
HistoryFeb 24, 2015 - 12:00 a.m.

KLA10464 Multiple vulnerabilities in Mozilla products

2015-02-2400:00:00
Kaspersky Lab
threats.kaspersky.com
32

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.7%

JSON

Detect date:

02/24/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privilleges, obtain sensitiv information, execute arbitrary code, spoof user interface or read local files.

Affected products:

Mozilla Firefox versions earlier than 36
Mozilla Firefox ESR versions earlier than 31.5
Mozilla Thunderbird versions earlier than 31.5

Solution:

Update to latest version!

Original advisories:

MFSA 2015-11 — 2015-27

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2015-08237.5Critical
CVE-2015-08286.8High
CVE-2015-08344.3Warning
CVE-2015-08357.5Critical
CVE-2015-08367.5Critical
CVE-2015-08254.3Warning
CVE-2015-08316.8High
CVE-2015-08305.0Critical
CVE-2015-08245.0Critical
CVE-2015-08274.3Warning
CVE-2015-08296.8High
CVE-2015-08224.3Warning
CVE-2015-08336.9High
CVE-2015-08266.8High
CVE-2015-08202.6Warning
CVE-2015-08325.0Critical
CVE-2015-08216.8High
CVE-2015-08194.3Warning

References

Related

openvas 53
nessus 34
ubuntu 3
freebsd 1
archlinux 2
suse 7
securityvulns 1
mageia 2
redhat 4
centos 3
osv 2
oraclelinux 3
debian 2
mozilla 18
ubuntucve 19
prion 19
cve 19
checkpoint_advisories 1
veracode 4
ibm 1
gentoo 1
openvas
openvas
Mozilla Firefox Multiple Vulnerabilities-01 (Mar 2015) - Mac OS X
2015-03-03 00:00:00
Ubuntu: Security Advisory (USN-2505-1)
2015-02-26 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Mar 2015) - Windows
2015-03-03 00:00:00
nessus
nessus
Firefox < 36.0 Multiple Vulnerabilities (Mac OS X)
2015-02-25 00:00:00
openSUSE Security Update : seamonkey (openSUSE-2015-250)
2015-03-24 00:00:00
FreeBSD : mozilla -- multiple vulnerabilities (99029172-8253-407d-9d8b-2cfeab9abf81)
2015-03-02 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-02-25 00:00:00
Firefox regression
2015-03-09 00:00:00
Thunderbird vulnerabilities
2015-03-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-02-24 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-02-25 00:00:00
thunderbird: multiple issues
2015-02-25 00:00:00
suse
suse
Security update for MozillaFirefox, mozilla-nss (important)
2015-03-01 11:04:54
Security update for MozillaFirefox (important)
2015-03-03 16:04:59
Security update for Mozilla Firefox (important)
2015-03-07 00:04:56
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-03-22 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-04-03 16:11:23
Updated firefox and thunderbird packages fix security vulnerabilities
2015-02-26 11:26:53
redhat
redhat
(RHSA-2015:0265) Critical: firefox security update
2015-02-24 00:00:00
(RHSA-2015:0629) Critical: firefox security update
2015-03-05 13:49:00
(RHSA-2015:0642) Important: thunderbird security update
2015-03-05 00:00:00
centos
centos
thunderbird security update
2015-02-25 20:08:47
thunderbird security update
2015-03-19 19:31:21
firefox, xulrunner security update
2015-02-25 03:04:39
osv
osv
iceweasel - security update
2015-02-25 00:00:00
icedove - security update
2015-03-03 00:00:00
oraclelinux
oraclelinux
firefox security update
2015-02-25 00:00:00
thunderbird security update
2015-03-12 00:00:00
thunderbird security update
2015-02-25 00:00:00
debian
debian
[SECURITY] [DSA 3179-1] icedove security update
2015-03-03 21:37:56
[SECURITY] [DSA 3174-1] iceweasel security update
2015-02-25 18:52:05
mozilla
mozilla
Miscellaneous memory safety hazards (rv:36.0 / rv:31.5) — Mozilla
2015-02-24 00:00:00
UI Tour whitelisted sites in background tab can spoof foreground tabs — Mozilla
2015-02-24 00:00:00
Double-free when using non-default memory allocators with a zero-length XHR — Mozilla
2015-02-24 00:00:00
ubuntucve
ubuntucve
CVE-2015-0819
2015-02-25 00:00:00
CVE-2015-0826
2015-02-25 00:00:00
CVE-2015-0823
2015-02-25 00:00:00
prion
prion
Spoofing
2015-02-25 11:59:00
Design/Logic Flaw
2015-02-25 11:59:00
Out-of-bounds
2015-02-25 11:59:00
cve
cve
CVE-2015-0819
2015-02-25 11:59:00
CVE-2015-0823
2015-02-25 11:59:00
CVE-2015-0828
2015-02-25 11:59:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox WebRTC Man-in-the-Middle Attack (CVE-2015-0834)
2015-03-18 00:00:00
veracode
veracode
Arbitrary File Read
2019-01-15 09:04:50
Information Disclosure
2019-05-02 05:12:31
Denial Of Service (DoS)
2019-05-02 05:12:32
ibm
ibm
Security Bulletin: Mozilla Firefox vulnerability issues in IBM SONAS (CVE-2014-1574, CVE-2014-1576, CVE-2014-1577, CVE-2014-1578, CVE-2014-1581, CVE-2014-1583, CVE-2014-1587, CVE-2014-1588, and 11 more)
2018-06-18 00:09:21
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.7%

JSON
Related for KLA10464
openvas53nessus34ubuntu3freebsd1archlinux2suse7securityvulns1mageia2redhat4centos3osv2oraclelinux3debian2mozilla18ubuntucve19prion19cve19checkpoint_advisories1veracode4ibm1gentoo1