Red Hat Security AdvisoryRHSA-2015:0988
firefox security update
Released 2015-05-12 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-38.0-4.el5_11, firefox-38.0-4.el5_11.i386
- Red Hat Enterprise Linux Client (v. 7) firefox-38.0-3.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-38.0-3.el7_1
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-38.0-4.el5_11, firefox-38.0-4.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-38.0-4.el6_6
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-38.0-4.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-38.0-4.el6_6
- Red Hat Enterprise Linux Server (v. 6) firefox-38.0-4.el6_6
- Red Hat Enterprise Linux Server (v. 7) firefox-38.0-3.ael7b_1, firefox-38.0-3.el7_1
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-38.0-4.el6_6, firefox-38.0-4.el6_6.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-38.0-3.el7_1, firefox-38.0-3.el7_1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-38.0-4.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) firefox-38.0-3.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-38.0-4.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-38.0-3.el7_1
Fixes 6 records
Priority MEDIUM 47
Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04021 · Published 2015-08-16 · Fixed CWE-189
Priority MEDIUM 43
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07227 · Published 2015-05-14 · Partial fix CWE-119
Priority MEDIUM 40
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04498 · Published 2015-05-14 · Fixed
Priority LOW 38
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application c…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05402 · Published 2015-05-14 · Fixed
Priority LOW 37
Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics da…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04439 · Published 2015-05-14 · Fixed CWE-119
Priority LOW 36
Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of serv…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03656 · Published 2015-05-14 · Fixed
THREATIST.IORead the docs