CVE-2015-2740
06.07.2015, 02:01
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | thunderbird | 𝑥 ≤ 38.0.1 |
| mozilla | firefox | 31.0 |
| mozilla | firefox | 31.1.0 |
| mozilla | firefox | 31.1.1 |
| mozilla | firefox | 31.3.0 |
| mozilla | firefox | 31.5.1 |
| mozilla | firefox | 31.5.2 |
| mozilla | firefox | 31.5.3 |
| mozilla | firefox | 38.0 |
| mozilla | firefox_esr | 31.1 |
| mozilla | firefox_esr | 31.2 |
| mozilla | firefox_esr | 31.3 |
| mozilla | firefox_esr | 31.4 |
| mozilla | firefox_esr | 31.5 |
| mozilla | firefox_esr | 31.6.0 |
| mozilla | firefox_esr | 31.7.0 |
| novell | suse_linux_enterprise_software_development_kit | 12.0 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 14.10 |
| canonical | ubuntu_linux | 15.04 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| novell | suse_linux_enterprise_desktop | 12.0 |
| novell | suse_linux_enterprise_server | 12.0 |
| mozilla | firefox | 𝑥 ≤ 38.1.0 |
| oracle | solaris | 11.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||
| thunderbird |
|
Common Weakness Enumeration
References