Red Hat Security AdvisoryRHSA-2015:2657
firefox security update
Released 2015-12-16 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) firefox-38.5.0-2.el5_11, firefox-38.5.0-2.el5_11.i386
- Red Hat Enterprise Linux Client (v. 7) firefox-38.5.0-3.el7_2
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-38.5.0-3.el7_2
- Red Hat Enterprise Linux Desktop (v. 5 client) firefox-38.5.0-2.el5_11, firefox-38.5.0-2.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) firefox-38.5.0-2.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-38.5.0-2.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-38.5.0-2.el6_7
- Red Hat Enterprise Linux Server (v. 6) firefox-38.5.0-2.el6_7
- Red Hat Enterprise Linux Server (v. 7) firefox-38.5.0-3.el7_2
- Red Hat Enterprise Linux Server Optional (v. 6) firefox-38.5.0-2.el6_7, firefox-38.5.0-2.el6_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-38.5.0-3.el7_2, firefox-38.5.0-3.el7_2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) firefox-38.5.0-2.el6_7
- Red Hat Enterprise Linux Workstation (v. 7) firefox-38.5.0-3.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-38.5.0-2.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-38.5.0-3.el7_2
Fixes 7 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0602 · Published 2015-12-16 · Fixed CWE-119
Priority MEDIUM 49
Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03174 · Published 2015-12-16 · Fixed CWE-189
Priority MEDIUM 40
Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04049 · Published 2015-12-16 · Fixed CWE-189
Priority MEDIUM 40
Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRT…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04309 · Published 2015-12-16 · Fixed
Priority LOW 37
Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04269 · Published 2015-12-16 · Fixed CWE-189
Priority LOW 37
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04075 · Published 2015-12-16 · Fixed CWE-189
Priority LOW 32
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06058 · Published 2015-12-16 · Fixed CWE-200
THREATIST.IORead the docs