CVE-2015-2736 The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allo...
HighCVSS 9.3
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 38.1.0 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Firefox | = 31.1.0 | No fix listed |
| mozilla Firefox | = 31.1.1 | No fix listed |
| mozilla Firefox | = 31.3.0 | No fix listed |
| mozilla Firefox | = 31.5.1 | No fix listed |
| mozilla Firefox | = 31.5.2 | No fix listed |
| mozilla Firefox | = 31.5.3 | No fix listed |
| mozilla Firefox | = 38.0 | No fix listed |
| mozilla Thunderbird | <= 38.0.1 | No fix listed |
| mozilla firefox esr | = 31.1 | No fix listed |
| mozilla firefox esr | = 31.2 | No fix listed |
| mozilla firefox esr | = 31.3 | No fix listed |
| mozilla firefox esr | = 31.4 | No fix listed |
| mozilla firefox esr | = 31.5 | No fix listed |
| mozilla firefox esr | = 31.6.0 | No fix listed |
| mozilla firefox esr | = 31.7.0 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| novell suse linux enterprise software development kit | = 12.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| novell suse linux enterprise desktop | = 12.0 | No fix listed |
| novell suse linux enterprise server | = 11-sp4 | No fix listed |
| novell suse linux enterprise server | = 12.0 | No fix listed |
References
- openSUSE-SU-2015:1229 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- SUSE-SU-2015:1268 third-party-advisory vendor-advisory
- SUSE-SU-2015:1269 third-party-advisory vendor-advisory
- SUSE-SU-2015:1449 vendor-advisory
- RHSA-2015:1207 vendor-advisory
- RHSA-2015:1455 vendor-advisory
- DSA-3300 vendor-advisory
- DSA-3324 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 75541 vdb-entry
- 1032783 vdb-entry
- 1032784 vdb-entry
- USN-2656-1 vendor-advisory
- USN-2656-2 vendor-advisory
- USN-2673-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking
- GLSA-201512-10 vendor-advisory