CVE-2015-2735 nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to h...
HighCVSS 9.3
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 38.1.0 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Firefox | = 31.1.0 | No fix listed |
| mozilla Firefox | = 31.1.1 | No fix listed |
| mozilla Firefox | = 31.3.0 | No fix listed |
| mozilla Firefox | = 31.5.1 | No fix listed |
| mozilla Firefox | = 31.5.2 | No fix listed |
| mozilla Firefox | = 31.5.3 | No fix listed |
| mozilla Firefox | = 38.0 | No fix listed |
| mozilla firefox esr | = 31.1 | No fix listed |
| mozilla firefox esr | = 31.2 | No fix listed |
| mozilla firefox esr | = 31.3 | No fix listed |
| mozilla firefox esr | = 31.4 | No fix listed |
| mozilla firefox esr | = 31.5 | No fix listed |
| mozilla firefox esr | = 31.6.0 | No fix listed |
| mozilla firefox esr | = 31.7.0 | No fix listed |
| mozilla Thunderbird | <= 38.0.1 | No fix listed |
| novell suse linux enterprise software development kit | = 12.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| novell suse linux enterprise desktop | = 12.0 | No fix listed |
| novell suse linux enterprise server | = 11-sp4 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| novell suse linux enterprise server | = 12.0 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
References
- openSUSE-SU-2015:1229 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- SUSE-SU-2015:1268 third-party-advisory vendor-advisory
- SUSE-SU-2015:1269 third-party-advisory vendor-advisory
- SUSE-SU-2015:1449 vendor-advisory
- RHSA-2015:1207 vendor-advisory
- RHSA-2015:1455 vendor-advisory
- DSA-3300 vendor-advisory
- DSA-3324 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 75541 vdb-entry
- 1032783 vdb-entry
- 1032784 vdb-entry
- USN-2656-1 vendor-advisory
- USN-2656-2 vendor-advisory
- USN-2673-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking
- GLSA-201512-10 vendor-advisory