CVE-2015-2726Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

Severity
10.0CRITICALNVD
EPSS
1.3%
top 20.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 6
Latest updateMay 17

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages6 packages

Ubuntumozilla/firefox< 39.0+build5-0ubuntu0.14.04.1
NVDmozilla/firefox38.1.0
NVDoracle/solaris11.3

🔴Vulnerability Details

4
GHSA
GHSA-hj7w-qcxj-wjmx: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 392022-05-17
OSV
vnc4 vulnerabilities2021-03-15
CVEList
CVE-2015-2726: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 392015-07-06
OSV
CVE-2015-2726: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 392015-07-05

📋Vendor Advisories

3
Ubuntu
Firefox vulnerabilities2015-07-15
Ubuntu
Firefox vulnerabilities2015-07-09
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:38.1) (MFSA 2015-59)2015-07-02

💬Community

1
Bugzilla
CVE-2015-2726 Mozilla: Miscellaneous memory safety hazards (rv:38.1) (MFSA 2015-59)2015-06-30
CVE-2015-2726 — Mozilla Firefox vulnerability | cvebase