CVE-2015-2716
14.05.2015, 10:59
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 ≤ 37.0.2 |
| novell | suse_linux_enterprise_software_development_kit | 12.0 |
| novell | suse_linux_enterprise_desktop | 12.0 |
| novell | suse_linux_enterprise_server | 12.0 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| mozilla | thunderbird | 𝑥 ≤ 31.5 |
| oracle | solaris | 11.3 |
| mozilla | firefox | 31.0 |
| mozilla | firefox | 31.1.0 |
| mozilla | firefox | 31.1.1 |
| mozilla | firefox | 31.3.0 |
| mozilla | firefox | 31.5.1 |
| mozilla | firefox | 31.5.2 |
| mozilla | firefox | 31.5.3 |
| mozilla | firefox_esr | 31.1 |
| mozilla | firefox_esr | 31.2 |
| mozilla | firefox_esr | 31.3 |
| mozilla | firefox_esr | 31.4 |
| mozilla | firefox_esr | 31.5 |
| mozilla | firefox_esr | 31.6.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||
| thunderbird |
|
Common Weakness Enumeration
References