CVE-2015-2740 Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote...
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Thunderbird | <= 38.0.1 | No fix listed |
| mozilla Firefox | = 31.0 | No fix listed |
| mozilla Firefox | = 31.1.0 | No fix listed |
| mozilla Firefox | = 31.1.1 | No fix listed |
| mozilla Firefox | = 31.3.0 | No fix listed |
| mozilla Firefox | = 31.5.1 | No fix listed |
| mozilla Firefox | = 31.5.2 | No fix listed |
| mozilla Firefox | = 31.5.3 | No fix listed |
| mozilla Firefox | = 38.0 | No fix listed |
| mozilla Firefox | <= 38.1.0 | No fix listed |
| mozilla firefox esr | = 31.1 | No fix listed |
| mozilla firefox esr | = 31.2 | No fix listed |
| mozilla firefox esr | = 31.3 | No fix listed |
| mozilla firefox esr | = 31.4 | No fix listed |
| mozilla firefox esr | = 31.5 | No fix listed |
| mozilla firefox esr | = 31.6.0 | No fix listed |
| mozilla firefox esr | = 31.7.0 | No fix listed |
| novell suse linux enterprise software development kit | = 12.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| novell suse linux enterprise desktop | = 12.0 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| novell suse linux enterprise server | = 11-sp4 | No fix listed |
| novell suse linux enterprise server | = 12.0 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
References
- openSUSE-SU-2015:1229 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- SUSE-SU-2015:1268 third-party-advisory vendor-advisory
- SUSE-SU-2015:1269 third-party-advisory vendor-advisory
- SUSE-SU-2015:1449 vendor-advisory
- RHSA-2015:1207 vendor-advisory
- RHSA-2015:1455 vendor-advisory
- DSA-3300 vendor-advisory
- DSA-3324 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 75541 vdb-entry
- 1032783 vdb-entry
- 1032784 vdb-entry
- USN-2656-1 vendor-advisory
- USN-2656-2 vendor-advisory
- USN-2673-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking
- GLSA-201512-10 vendor-advisory