CVE-2015-4475 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 ≤ 39.0.3
mozilla	firefox	38.0
mozilla	firefox	38.0.1
mozilla	firefox	38.0.5
mozilla	firefox	38.1.0
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	15.04
opensuse	opensuse	13.1
opensuse	opensuse	13.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

firefox

precise	Fixed 40.0+build4-0ubuntu0.12.04.1 released
trusty	Fixed 40.0+build4-0ubuntu0.14.04.1 released
vivid	Fixed 40.0+build4-0ubuntu0.15.04.1 released

openSUSE / SLES Releases

openSUSE Product

Release

MozillaFirefox

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 12 SP5	68.1.0-109.92.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 12 SP5	68.1.0-109.92.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaFirefox-branding-SLE

suse enterprise sap 12	31.0-14.1 fixed
suse enterprise server 12	31.0-14.1 fixed

MozillaFirefox-devel

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise desktop 15 SP7	102.12.0-150200.152.90.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise sap 15 SP7	102.12.0-150200.152.90.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	102.12.0-150200.152.90.1 fixed
suse enterprise server 15 SP7	102.12.0-150200.152.90.1 fixed

MozillaFirefox-translations-common

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 12 SP5	68.1.0-109.92.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 12 SP5	68.1.0-109.92.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaFirefox-translations-other

suse enterprise desktop 15	52.7.3-1.35 fixed
suse enterprise desktop 15 SP1	60.6.2-3.32.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.87.1 fixed
suse enterprise desktop 15 SP3	78.10.0-8.38.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise desktop 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise desktop 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise desktop 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise sap 15	52.7.3-1.35 fixed
suse enterprise sap 15 SP1	60.6.2-3.32.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.87.1 fixed
suse enterprise sap 15 SP3	78.10.0-8.38.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise sap 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise sap 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise sap 15 SP7	128.9.0-150200.152.176.1 fixed
suse enterprise server 15	52.7.3-1.35 fixed
suse enterprise server 15 SP1	60.6.2-3.32.1 fixed
suse enterprise server 15 SP2	68.8.0-3.87.1 fixed
suse enterprise server 15 SP3	78.10.0-8.38.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.152.26.1 fixed
suse enterprise server 15 SP5	102.11.0-150200.152.87.1 fixed
suse enterprise server 15 SP6	115.10.0-150200.152.134.1 fixed
suse enterprise server 15 SP7	128.9.0-150200.152.176.1 fixed

MozillaThunderbird

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise desktop 15 SP1	60.6.1-3.28.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.80.2 fixed
suse enterprise desktop 15 SP3	78.10.0-8.23.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise sap 15 SP1	60.6.1-3.28.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.80.2 fixed
suse enterprise sap 15 SP3	78.10.0-8.23.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise server 15 SP1	60.6.1-3.28.1 fixed
suse enterprise server 15 SP2	68.8.0-3.80.2 fixed
suse enterprise server 15 SP3	78.10.0-8.23.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise workstation 15	52.8-1.2 fixed
suse enterprise workstation 15 SP1	60.6.1-3.28.1 fixed
suse enterprise workstation 15 SP2	68.8.0-3.80.2 fixed
suse enterprise workstation 15 SP3	78.10.0-8.23.1 fixed
suse enterprise workstation 15 SP4	91.8.0-150200.8.65.1 fixed

MozillaThunderbird-devel

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise workstation 15	52.8-1.2 fixed

MozillaThunderbird-translations-common

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise desktop 15 SP1	60.6.1-3.28.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.80.2 fixed
suse enterprise desktop 15 SP3	78.10.0-8.23.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise sap 15 SP1	60.6.1-3.28.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.80.2 fixed
suse enterprise sap 15 SP3	78.10.0-8.23.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise server 15 SP1	60.6.1-3.28.1 fixed
suse enterprise server 15 SP2	68.8.0-3.80.2 fixed
suse enterprise server 15 SP3	78.10.0-8.23.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise workstation 15	52.8-1.2 fixed
suse enterprise workstation 15 SP1	60.6.1-3.28.1 fixed
suse enterprise workstation 15 SP2	68.8.0-3.80.2 fixed
suse enterprise workstation 15 SP3	78.10.0-8.23.1 fixed
suse enterprise workstation 15 SP4	91.8.0-150200.8.65.1 fixed

MozillaThunderbird-translations-other

suse enterprise desktop 15	52.8-1.2 fixed
suse enterprise desktop 15 SP1	60.6.1-3.28.1 fixed
suse enterprise desktop 15 SP2	68.8.0-3.80.2 fixed
suse enterprise desktop 15 SP3	78.10.0-8.23.1 fixed
suse enterprise desktop 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise sap 15	52.8-1.2 fixed
suse enterprise sap 15 SP1	60.6.1-3.28.1 fixed
suse enterprise sap 15 SP2	68.8.0-3.80.2 fixed
suse enterprise sap 15 SP3	78.10.0-8.23.1 fixed
suse enterprise sap 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise server 15	52.8-1.2 fixed
suse enterprise server 15 SP1	60.6.1-3.28.1 fixed
suse enterprise server 15 SP2	68.8.0-3.80.2 fixed
suse enterprise server 15 SP3	78.10.0-8.23.1 fixed
suse enterprise server 15 SP4	91.8.0-150200.8.65.1 fixed
suse enterprise workstation 15	52.8-1.2 fixed
suse enterprise workstation 15 SP1	60.6.1-3.28.1 fixed
suse enterprise workstation 15 SP2	68.8.0-3.80.2 fixed
suse enterprise workstation 15 SP3	78.10.0-8.23.1 fixed
suse enterprise workstation 15 SP4	91.8.0-150200.8.65.1 fixed

libfreebl3

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libfreebl3-32bit

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libfreebl3-hmac

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libfreebl3-hmac-32bit

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libsoftokn3

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libsoftokn3-32bit

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libsoftokn3-hmac

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

libsoftokn3-hmac-32bit

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

mozilla-nss

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

mozilla-nss-32bit

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

mozilla-nss-certs

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

mozilla-nss-certs-32bit

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

mozilla-nss-tools

suse enterprise sap 12	3.19.2.0-26.2 fixed
suse enterprise server 12	3.19.2.0-26.2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

firefox

RHEL 6	0:38.2.0-4.el6_7 fixed
RHEL 7	0:38.2.0-4.el7_1 fixed

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html

http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html

http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html

http://rhn.redhat.com/errata/RHSA-2015-1586.html

http://www.mozilla.org/security/announce/2015/mfsa2015-80.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.securityfocus.com/bid/76294

http://www.securitytracker.com/id/1033247

http://www.ubuntu.com/usn/USN-2702-1

http://www.ubuntu.com/usn/USN-2702-2

http://www.ubuntu.com/usn/USN-2702-3

https://bugzilla.mozilla.org/show_bug.cgi?id=1175396

https://security.gentoo.org/glsa/201605-06