CVE-2015-2734

CVE-2015-2734 details (mode C): The vulnerability affects Mozilla Firefox (Direct3D 9 implementation) in Windows builds prior to 39.0, Firefox ESR 31.x prior to 31.8 and 38.x prior to 38.1, and Thunderbird prior to 38.1. The underlying issue is reading data from uninitialized memory locations in ...

CVE-2015-2724

CVE-2015-2724 involves memory safety bugs in the Mozilla Firefox browser engine (affecting Firefox up to version 39.0, ESR lines older than 31.8/38.1, and Thunderbird before 38.1). The issues allow remote attackers to cause a denial of service via memory corruption or potentially execute arbitrar...

CVE-2015-2738

CVE-2015-2738 affects Mozilla Firefox (before 39.0; ESR 31.x before 31.8 and 38.x before 38.1) and Thunderbird (before 38.1). The issue is a read from uninitialized memory in YCbCrImageDataDeserializer::ToDataSourceSurface, with unspecified impact and attack vectors. No remediation details are pr...

CVE-2015-2731

CVE-2015-2731 is a use-after-free vulnerability in the CSPService::ShouldLoad function of Firefox’s microtask implementation (and affects Thunderbird). An attacker could trigger removal of a DOM object via client-side JavaScript based on a Content Policy, leading to remote code execution. Affecte...

CVE-2015-2739

CVE-2015-2739 affects Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1. The issue is in ArrayBufferBuilder::append, which accesses unintended memory locations. The description notes unspecified impact and attack vectors; no explicit explo...

CVE-2015-2729

Mozilla Firefox contains an out-of-bounds read in AudioParamTimeline::AudioNodeInputValue affecting Web Audio oscillator rendering range (pre-39.0 and ESR 38.x before 38.1). Remote attackers could disclose a few bytes of memory or trigger a DoS. The fix is to upgrade Firefox to 39.0+ (and ESR 38....

CVE-2015-2740

CVE-2015-2740 affects Mozilla Firefox (and Thunderbird) with a buffer overflow in nsXMLHttpRequest::AppendToResponseText, allowing remote denial of service or other impact. Affected: Firefox before 39.0; Firefox ESR 31.x before 31.8 and 38.x before 38.1. Remediation: upgrade to Firefox 39.0+ (and...

CVE-2015-2725

CVE-2015-2725 refers to multiple memory safety vulnerabilities in Mozilla Firefox (and Thunderbird) that could allow remote code execution or memory corruption leading to a crash. The connected IBM advisories confirm affected products (IBM Storwize V7000 Unified and IBM SONAS) ship Firefox compon...

CVE-2015-2735

CVE-2015-2735 affects Mozilla Firefox (before 39.0), Firefox ESR (31.x before 31.8 and 38.x before 38.1), and Thunderbird (before 38.1). The issue is in nsZipArchive.cpp where memory locations are accessed in an unintended way when processing crafted ZIP archives, which could allow a remote attac...

CVE-2015-2737

CVE-2015-2737 affects Mozilla Firefox before 39.0 (and ESR 31.x before 31.8, 38.x before 38.1) and Thunderbird before 38.1. It targets rx::d3d11::SetBufferData, which reads data from uninitialized memory locations. The description notes the impact and attack vectors are unspecified; no explicit f...

CVE-2015-2736

CVE-2015-2736 concerns Mozilla Firefox (pre-39.0), Firefox ESR (31.x pre-31.8 and 38.x pre-38.1), and Thunderbird (pre-38.1). The issue is in nsZipArchive::BuildFileList where unintended memory locations may be accessed when processing crafted ZIP archives, leading to a remote attacker potentiall...