Lucene search

K
ubuntuUbuntuUSN-2571-1
HistoryApr 24, 2015 - 12:00 a.m.

Firefox vulnerability

2015-04-2400:00:00
ubuntu.com
25

9.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.078 Low

EPSS

Percentile

94.2%

Releases

  • Ubuntu 15.04
  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • firefox - Mozilla Open Source web browser

Details

Robert Kaiser discovered a use-after-free during plugin initialization in
some circumstances. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to cause a
denial of service via application crash or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2015-2706)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchfirefox< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-dbg< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-dev< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-globalmenu< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-locale-af< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-locale-an< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-locale-ar< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-locale-as< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-locale-ast< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchfirefox-locale-az< 37.0.2+build1-0ubuntu0.15.04.1UNKNOWN
Rows per page:
1-10 of 3671

9.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.078 Low

EPSS

Percentile

94.2%