Kaspersky LabKLA10689KLA10689 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.091 Low
EPSS
Percentile
94.5%
Detect date:
11/03/2015
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions, execute arbitrary code or obtain sensitive information.
Affected products:
Mozilla Firefox versions earlier than 42
Mozilla Firefox ESR versions earlier than 38.4
Solution:
Update to the latest version
Get Firefox ESR
Get Firefox
Original advisories:
Mozilla foundation security advisories
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2015-71837.5Critical
CVE-2015-72007.5Critical
CVE-2015-71997.5Critical
CVE-2015-71987.5Critical
CVE-2015-71975.0Warning
CVE-2015-71966.8High
CVE-2015-71955.0Warning
CVE-2015-71947.5Critical
CVE-2015-71937.5Critical
CVE-2015-71927.5Critical
CVE-2015-71914.3Warning
CVE-2015-71905.0Warning
CVE-2015-71896.8High
CVE-2015-71887.5Critical
CVE-2015-71874.3Warning
CVE-2015-71864.3Warning
CVE-2015-71854.3Warning
CVE-2015-71827.5Critical
CVE-2015-71817.5Critical
CVE-2015-45184.3Warning
CVE-2015-45154.3Warning
CVE-2015-45147.5Critical
CVE-2015-45137.5Critical
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4513
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4514
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4515
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4518
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7181
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7182
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7183
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7185
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7186
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7187
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7188
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7189
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7190
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7191
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7192
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7193
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7194
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7195
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7196
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7197
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7198
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7199
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7200
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Mozilla-Firefox-ESR/
threats.kaspersky.com/en/product/Mozilla-Firefox/
www.mozilla.org/en-US/firefox/new/
www.mozilla.org/en-US/firefox/organizations/all/
www.mozilla.org/en-US/security/advisories/
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.091 Low
EPSS
Percentile
94.5%