Red Hat Security Advisory

RHSA-2015:1586

firefox security update

Released 2015-08-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) firefox-38.2.0-4.el5_11, firefox-38.2.0-4.el5_11.i386
Red Hat Enterprise Linux Client (v. 7) firefox-38.2.0-4.el7_1
Red Hat Enterprise Linux Client Optional (v. 7) firefox-38.2.0-4.el7_1
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-38.2.0-4.el5_11, firefox-38.2.0-4.el5_11.i386
Red Hat Enterprise Linux Desktop (v. 6) firefox-38.2.0-4.el6_7
Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-38.2.0-4.el6_7
Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-38.2.0-4.el6_7
Red Hat Enterprise Linux Server (v. 6) firefox-38.2.0-4.el6_7
Red Hat Enterprise Linux Server (v. 7) firefox-38.2.0-4.ael7b_1, firefox-38.2.0-4.el7_1
Red Hat Enterprise Linux Server Optional (v. 6) firefox-38.2.0-4.el6_7, firefox-38.2.0-4.el6_7.ppc
Red Hat Enterprise Linux Server Optional (v. 7) firefox-38.2.0-4.el7_1, firefox-38.2.0-4.el7_1.ppc
Red Hat Enterprise Linux Workstation (v. 6) firefox-38.2.0-4.el6_7
Red Hat Enterprise Linux Workstation (v. 7) firefox-38.2.0-4.el7_1
Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-38.2.0-4.el6_7
Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-38.2.0-4.el7_1

Fixes 14 records

TI-2015-03757 CVE-2015-4479 · GHSA-fv35-f685-jqpw

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox…

MEDIUM 54

Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08226 Published 2015-08-16 Fixed CWE-189

TI-2015-03763 CVE-2015-4485 · GHSA-g65r-8pw6-88qw

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla…

MEDIUM 53

Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07696 Published 2015-08-16 Fixed CWE-119

TI-2015-03764 CVE-2015-4486 · GHSA-4fpr-qvvc-44qw

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR…

MEDIUM 52

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06021 Published 2015-08-16 Fixed CWE-119

TI-2015-03751 CVE-2015-4473 · GHSA-49v6-8hgf-2jxx

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0…

MEDIUM 52

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06694 Published 2015-08-16 Fixed CWE-119

TI-2015-03771 CVE-2015-4493 · GHSA-8mf7-p7xv-mq52

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in…

MEDIUM 50

Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an i…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06654 Published 2015-08-16 Fixed CWE-119

TI-2015-03758 CVE-2015-4480 · GHSA-v7qw-fg65-g54w

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in…

MEDIUM 48

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05166 Published 2015-08-16 Fixed CWE-189

TI-2015-03769 CVE-2015-4491 · GHSA-735c-hqgj-f846

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf…

MEDIUM 41

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other produ…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.084 Published 2015-08-16 Fixed CWE-189

TI-2015-03770 CVE-2015-4492 · GHSA-wrm5-mpfp-r9x4

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla…

MEDIUM 40

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object tha…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04478 Published 2015-08-16 Fixed

TI-2015-03753 CVE-2015-4475 · GHSA-qrvx-fg3g-ff4r

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x…

MEDIUM 40

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cau…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04229 Published 2015-08-16 Fixed CWE-119

TI-2015-03766 CVE-2015-4488 · GHSA-pfmq-4r52-h3xc

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before…

LOW 39

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03194 Published 2015-08-16 Fixed

TI-2015-03765 CVE-2015-4487 · GHSA-99c3-fh27-qg5q

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x…

LOW 39

The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly hav…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03194 Published 2015-08-16 Fixed CWE-119

TI-2015-03767 CVE-2015-4489 · GHSA-78h7-72xw-23vg

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and…

LOW 38

The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified o…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03036 Published 2015-08-16 Fixed CWE-119

TI-2015-03762 CVE-2015-4484 · GHSA-c78v-3pfm-39g8

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in…

LOW 29

The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03566 Published 2015-08-16 Fixed CWE-119

TI-2015-03756 CVE-2015-4478 · GHSA-m7fr-3m5q-g72f

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain…

LOW 28

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0281 Published 2015-08-16 Fixed CWE-200