CVE-2015-7196
05.11.2015, 05:59
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 ≤ 41.0.2 |
| mozilla | firefox | 38.0 |
| mozilla | firefox | 38.0.1 |
| mozilla | firefox | 38.0.5 |
| mozilla | firefox | 38.1.0 |
| mozilla | firefox | 38.1.1 |
| mozilla | firefox | 38.2.0 |
| mozilla | firefox | 38.2.1 |
| mozilla | firefox | 38.3.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References