Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10584
HistoryMay 12, 2015 - 12:00 a.m.

KLA10584 Multiple vulnerabilities in Mozilla products

2015-05-1200:00:00
Kaspersky Lab
threats.kaspersky.com
65

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

92.9%

JSON

Detect date:

05/12/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code or obtain sensitive information.

Affected products:

Mozilla Firefox versions earlier than 38.0
Mozilla Firefox ESR versions earlier than 31.7
Mozilla Thunderbird versions earlier than 31.7

Solution:

Update to the latest version
Get Thunderbird
Get Firefox

Original advisories:

Mozilla Foundation Security Advisory

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2015-08336.9High
CVE-2015-27106.8High
CVE-2015-27184.3Warning
CVE-2015-27156.8High
CVE-2015-27142.1Warning
CVE-2015-27167.5Critical
CVE-2015-27114.3Warning
CVE-2015-27097.5Critical
CVE-2015-27204.4Warning
CVE-2015-07976.8High
CVE-2015-27176.8High
CVE-2015-27127.5Critical
CVE-2015-27136.8High
CVE-2015-27087.5Critical
CVE-2015-44969.3Critical

References

Related

nessus 39
openvas 48
securityvulns 3
freebsd 1
ubuntu 2
archlinux 2
suse 4
veracode 6
redhat 4
centos 3
osv 3
oraclelinux 3
debian 4
mageia 3
mozilla 14
cve 17
ubuntucve 17
prion 16
ibm 5
gentoo 1
android 1
f5 2
debiancve 1
nessus
nessus
Mozilla Firefox < 38.0 Multiple Vulnerabilities
2015-09-16 00:00:00
Mozilla Firefox ESR < 31.7 Multiple Vulnerabilities
2019-11-06 00:00:00
Firefox < 38.0 Multiple Vulnerabilities (Mac OS X)
2015-05-13 00:00:00
openvas
openvas
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Mac OS X
2015-05-21 00:00:00
Ubuntu: Security Advisory (USN-2602-1)
2015-06-09 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Windows
2015-05-21 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-05-13 00:00:00
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
2015-04-17 00:00:00
gst-plugins buffer overflow
2015-04-17 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-05-12 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-05-13 00:00:00
Thunderbird vulnerabilities
2015-05-18 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-05-13 00:00:00
thunderbird: multiple issues
2015-05-18 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2015-05-28 12:05:02
Security update for MozillaFirefox (important)
2015-06-01 15:05:51
Update to Firefox 31.7.0esr (important)
2015-05-18 13:04:51
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:39:10
Arbitrary Code Execution
2019-05-02 05:39:09
Arbitrary Code Execution
2019-05-02 05:39:09
redhat
redhat
(RHSA-2015:0988) Critical: firefox security update
2015-05-12 00:00:00
(RHSA-2015:1012) Important: thunderbird security update
2015-05-18 00:00:00
(RHSA-2020:2508) Moderate: expat security update
2020-06-10 16:46:54
centos
centos
firefox security update
2015-05-13 00:01:13
thunderbird security update
2015-05-18 14:07:12
expat security update
2020-04-08 17:58:10
osv
osv
icedove - security update
2015-05-19 00:00:00
expat - security update
2015-07-25 00:00:00
gst-plugins-bad0.10 - security update
2015-04-15 00:00:00
oraclelinux
oraclelinux
firefox security update
2015-05-13 00:00:00
thunderbird security update
2015-05-19 00:00:00
expat security update
2020-04-06 00:00:00
debian
debian
[SECURITY] [DSA 3264-1] icedove security update
2015-05-19 21:12:26
[SECURITY] [DSA 3260-1] iceweasel security update
2015-05-13 17:22:46
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
2015-04-15 15:23:10
mageia
mageia
Updated Firefox, Thunderbird & sqlite3 packages fix security vulnerabilities
2015-05-18 22:08:05
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities
2015-05-05 16:36:50
mozilla
mozilla
Miscellaneous memory safety hazards (rv:38.0 / rv:31.7) — Mozilla
2015-05-12 00:00:00
Mozilla Windows updater can be run outside of application directory — Mozilla
2015-05-12 00:00:00
Sensitive URL encoded information written to Android logcat — Mozilla
2015-05-12 00:00:00
cve
cve
CVE-2015-2714
2015-05-14 10:59:00
CVE-2015-2715
2015-05-14 10:59:00
CVE-2015-2717
2015-05-14 10:59:00
ubuntucve
ubuntucve
CVE-2015-2714
2015-05-14 00:00:00
CVE-2015-2717
2015-05-13 00:00:00
CVE-2015-2715
2015-05-13 00:00:00
prion
prion
Integer overflow
2015-05-14 10:59:00
Design/Logic Flaw
2015-05-14 10:59:00
Path traversal
2015-05-14 10:59:00
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by a buffer overflow vulnerability (CVE-2015-2716)
2020-07-23 21:34:53
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Standards Processing Engine and IBM Transformation Extender Advanced (CVE-2015-1283)
2022-05-15 12:11:44
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Configuration Manager(CVE-2015-1283)
2019-01-22 16:30:15
gentoo
gentoo
GStreamer: User-assisted execution of arbitrary code
2015-12-30 00:00:00
android
android
CVE-2015-1538
2015-08-01 00:00:00
f5
f5
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
K15104541 : Expat XML library vulnerability CVE-2015-1283
2016-10-11 00:00:00
debiancve
debiancve
CVE-2015-1283
2015-07-23 00:59:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

92.9%

JSON
Related for KLA10584
nessus39openvas48securityvulns3freebsd1ubuntu2archlinux2suse4veracode6redhat4centos3osv3oraclelinux3debian4mageia3mozilla14cve17ubuntucve17prion16ibm5gentoo1android1f52debiancve1