CVE-2015-2734 The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 re...
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Firefox | = 31.1.0 | No fix listed |
| mozilla Firefox | = 31.1.1 | No fix listed |
| mozilla Firefox | = 31.3.0 | No fix listed |
| mozilla Firefox | = 31.5.1 | No fix listed |
| mozilla Firefox | = 31.5.2 | No fix listed |
| mozilla Firefox | = 31.5.3 | No fix listed |
| mozilla Firefox | = 38.0 | No fix listed |
| mozilla Firefox | <= 38.1.0 | No fix listed |
| mozilla firefox esr | = 31.1 | No fix listed |
| mozilla firefox esr | = 31.2 | No fix listed |
| mozilla firefox esr | = 31.3 | No fix listed |
| mozilla firefox esr | = 31.4 | No fix listed |
| mozilla firefox esr | = 31.5 | No fix listed |
| mozilla firefox esr | = 31.6.0 | No fix listed |
| mozilla firefox esr | = 31.7.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian linux | = 8.0 | No fix listed |
| mozilla Thunderbird | <= 38.0.1 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
References
- openSUSE-SU-2015:1229 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- SUSE-SU-2015:1268 third-party-advisory vendor-advisory
- SUSE-SU-2015:1269 third-party-advisory vendor-advisory
- SUSE-SU-2015:1449 vendor-advisory
- RHSA-2015:1207 vendor-advisory
- RHSA-2015:1455 vendor-advisory
- DSA-3300 vendor-advisory
- DSA-3324 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 75541 vdb-entry
- 1032783 vdb-entry
- 1032784 vdb-entry
- USN-2656-1 vendor-advisory
- USN-2656-2 vendor-advisory
- USN-2673-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking
- GLSA-201512-10 vendor-advisory