cbcvebase.
CVE-2015-2725
published 2015-07-06

CVE-2015-2725: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow…

critical10CVSS 3.1
AVNACLAuNCCICAC
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected

24 ranges
VendorProductVersion rangeFixed in
mozillafirefox<= 38.1.0
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox
mozillafirefox>= 0 < 39.0+build5-0ubuntu0.14.04.139.0+build5-0ubuntu0.14.04.1
mozillafirefox_esr
mozillafirefox_esr
mozillafirefox_esr
mozillafirefox_esr
mozillafirefox_esr
mozillafirefox_esr
mozillafirefox_esr
mozillathunderbird<= 38.0.1
mozillathunderbird>= 0 < 1:31.8.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.1
novellsuse_linux_enterprise_desktop
novellsuse_linux_enterprise_server
novellsuse_linux_enterprise_server
novellsuse_linux_enterprise_software_development_kit
oraclesolaris

CVSS provenance

nvd10.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL