PT-2015-3404 · Mozilla+5 · Firefox+7

Eric Rahm

·

Publicado

2015-05-12

·

Atualizado

2024-12-12

·

CVE-2015-2716

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 38.0 Mozilla Firefox ESR versions 31.x prior to 31.7 Thunderbird versions prior to 31.7
Description The issue is caused by a buffer overflow in the XML parser, allowing remote attackers to execute arbitrary code by providing a large amount of compressed XML data.
Recommendations For Mozilla Firefox versions prior to 38.0, update to version 38.0 or later. For Mozilla Firefox ESR versions 31.x prior to 31.7, update to version 31.7 or later. For Thunderbird versions prior to 31.7, update to version 31.7 or later.

Exploit

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-1463
ALT-PU-2015-1464
ALT-PU-2015-1584
BDU:2021-03335
CESA-2015_0988
CESA-2015_1012
CESA-2020_1011
CVE-2015-2716
DSA-3260-1
DSA-3264-1
MGASA-2015-0234
MGASA-2015-0342
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2015:0988
RHSA-2015:1012
RHSA-2015_0988
RHSA-2015_1012
RHSA-2020:1011
RHSA-2020:2508
RHSA-2020_1011
SUSE-SU-2015:0960-1
USN-2602-1
USN-2603-1

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu