Lucene search
Mozilla FoundationMFSA2015-123HistoryNov 03, 2015 - 12:00 a.m.
Buffer overflow during image interactions in canvas — Mozilla
2015-11-0300:00:00
Mozilla Foundation
www.mozilla.org
20
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.091 Low
EPSS
Percentile
94.7%
Security researcher Looben Yang reported a buffer overflow in the JPEGEncoder function during script interactions with a canvas element. This is caused by a race condition and incorrectly matched sizes following image interactions. This leads to a potentially exploitable crash.
Affected configurations
Node
mozillafirefoxRange<42
ORmozillafirefox_esrRange<38.4
ORmozillathunderbirdRange<38.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 42 | |
| firefox esr | lt | 38.4 | |
| thunderbird | lt | 38.4 |
Related
cvelist
cvelist
CVE-2015-7189
2015-11-05 02:00:00
ubuntucve
ubuntucve
CVE-2015-7189
2015-11-04 00:00:00
prion
prion
Race condition
2015-11-05 05:59:00
nvd
nvd
CVE-2015-7189
2015-11-05 05:59:13
cve
cve
CVE-2015-7189
2015-11-05 05:59:13
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-123) - Linux
2021-11-11 00:00:00
RedHat Update for thunderbird RHSA-2015:2519-01
2015-11-27 00:00:00
CentOS Update for thunderbird CESA-2015:2519 centos5
2015-12-11 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : thunderbird (ELSA-2015-2519)
2015-11-30 00:00:00
RHEL 5 / 6 / 7 : thunderbird (RHSA-2015:2519)
2015-11-30 00:00:00
CentOS 5 / 6 / 7 : thunderbird (CESA-2015:2519)
2015-11-30 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2015-11-27 00:00:00
firefox security update
2015-11-04 00:00:00
centos
centos
thunderbird security update
2015-11-27 06:41:12
firefox security update
2015-11-04 15:58:03
redhat
redhat
(RHSA-2015:2519) Important: thunderbird security update
2015-11-26 00:00:00
(RHSA-2015:1982) Critical: firefox security update
2015-11-04 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2015-11-28 02:11:20
Updated firefox, nspr, nss packages fix security vulnerability
2015-11-04 21:03:05
Updated iceape packages fix security vulnerabilities
2015-11-17 00:36:58
veracode
veracode
Privilege Escalation
2019-05-02 05:43:39
Arbitrary Code Execution
2019-05-02 05:43:38
Authentication Bypass
2019-05-02 05:43:37
suse
suse
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-12 17:11:49
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-06 17:11:17
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-11-12 20:10:40
ubuntu
ubuntu
Thunderbird vulnerabilities
2015-12-01 00:00:00
Firefox vulnerabilities
2015-11-04 00:00:00
debian
debian
[SECURITY] [DSA 3393-1] iceweasel security update
2015-11-04 18:41:55
[SECURITY] [DSA 3410-1] icedove security update
2015-12-01 22:21:09
archlinux
archlinux
firefox: multiple issues
2015-11-04 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-11-03 00:00:00
kaspersky
kaspersky
KLA10689 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2015-11-03 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.091 Low
EPSS
Percentile
94.7%
Related for MFSA2015-123