Browse CVEs

HIGH 7.5 CVE-2015-4522 The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a de… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-4521 The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of s… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-4517 NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory co… Firefox after 40.0.3 Fix from $1,9502015-09-24 MEDIUM 6.4 CVE-2015-4512 gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface cr… Firefox after 40.0.3 Fix from $1,6002015-09-24 MEDIUM 6.8 CVE-2015-4511 Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote att… Firefox after 40.0.3 Fix from $1,6002015-09-24 MEDIUM 6.8 CVE-2015-4506 Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows r… Firefox after 40.0.3 Fix from $1,6002015-09-24 MEDIUM 6.4 CVE-2015-4504 The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause… Firefox after 40.0.3 Fix from $1,6002015-09-24 HIGH 7.5 CVE-2015-4501 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory… Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 7.5 CVE-2015-4500 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to … Firefox after 40.0.3 Fix from $1,9502015-09-24 HIGH 9.3 CVE-2015-4493EPSS 7% Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x… Firefox after 39.0.3 Fix from $1,9502015-08-16 HIGH 7.5 CVE-2015-4489 The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause… Firefox after 39.0.3 Fix from $1,9502015-08-16 HIGH 7.5 CVE-2015-4487 The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote att… Firefox after 39.0.3 Fix from $1,9502015-08-16 HIGH 10.0 CVE-2015-4485EPSS 8% Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows re… Firefox after 39.0.3 Fix from $1,9502015-08-16 HIGH 7.5 CVE-2015-4475 The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 aud… Firefox after 39.0.3 Fix from $1,9502015-08-16 HIGH 10.0 CVE-2015-2740EPSS 6% Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 3… Firefox after 38.1.0 Fix from $1,9502015-07-06 HIGH 10.0 CVE-2015-2739 The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.… Firefox after 38.1.0 Fix from $1,9502015-07-06 MEDIUM 5.0 CVE-2015-2729 The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 … Firefox after 38.1.0 Fix from $1,6002015-07-06 HIGH 10.0 CVE-2015-2726EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory… Firefox after 38.1.0 Fix from $1,9502015-07-06 HIGH 10.0 CVE-2015-2725EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 … Firefox after 38.1.0 Fix from $1,9502015-07-06 HIGH 10.0 CVE-2015-2724EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thu… Firefox after 38.1.0 Fix from $1,9502015-07-06 HIGH 7.5 CVE-2015-2716EPSS 7% Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers t… Firefox after 37.0.2 Fix from $1,9502015-05-14 HIGH 7.5 CVE-2015-2712 The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds chec… Firefox after 37.0.2 Fix from $1,9502015-05-14 MEDIUM 6.8 CVE-2015-2710 Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows… Firefox after 37.0.2 Fix from $1,6002015-05-14 MEDIUM 6.4 CVE-2015-0811 The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a de… Firefox after 36.0.4 Fix from $1,6002015-04-01 MEDIUM 6.8 CVE-2015-0826 The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a deni… Firefox after 35.0.1 Fix from $1,6002015-02-25 MEDIUM 6.8 CVE-2014-1593 Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird b… Firefox after 33.0 Fix from $1,6002014-12-11 HIGH 7.5 CVE-2014-1576EPSS 5% Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x be… Firefox after 32.0 Fix from $1,9502014-10-15 HIGH 7.5 CVE-2014-1578 The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause… Firefox after 32.0 Fix from $1,9502014-10-15 HIGH 10.0 CVE-2014-1553EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before … Firefox after 31.1.0 Fix from $1,9502014-09-03 HIGH 10.0 CVE-2014-1554EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory… Firefox after 31.1.0 Fix from $1,9502014-09-03