ISOMAN

CVE

CVE-2015-2740

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.

Severity
HIGH
CVSS
10
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
  2. http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
  3. http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
  4. http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
  5. http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
  6. http://rhn.redhat.com/errata/RHSA-2015-1207.html
  7. http://rhn.redhat.com/errata/RHSA-2015-1455.html
  8. http://www.debian.org/security/2015/dsa-3300
  9. http://www.debian.org/security/2015/dsa-3324
  10. http://www.mozilla.org/security/announce/2015/mfsa2015-66.html
  11. http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
  12. http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
  13. http://www.securityfocus.com/bid/75541
  14. http://www.securitytracker.com/id/1032783
  15. http://www.securitytracker.com/id/1032784
  16. http://www.ubuntu.com/usn/USN-2656-1
  17. http://www.ubuntu.com/usn/USN-2656-2
  18. http://www.ubuntu.com/usn/USN-2673-1
  19. https://bugzilla.mozilla.org/show_bug.cgi?id=1170809
  20. https://security.gentoo.org/glsa/201512-10