Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-2736

Опубликовано: 06 июл. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 9.3

Описание

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

РелизСтатусПримечание
devel

released

39.0+build5-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [39.0+build5-0ubuntu0.14.04.1]]
precise

released

39.0+build5-0ubuntu0.12.04.2
trusty

released

39.0+build5-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [39.0+build5-0ubuntu0.14.04.1]
upstream

released

39.0
utopic

released

39.0+build5-0ubuntu0.14.10.1
vivid

released

39.0+build5-0ubuntu0.15.04.1

Показывать по

РелизСтатусПримечание
devel

released

1:31.8.0+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:31.8.0+build1-0ubuntu0.14.04.1]]
precise

released

1:31.8.0+build1-0ubuntu0.12.04.1
trusty

released

1:31.8.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:31.8.0+build1-0ubuntu0.14.04.1]
upstream

released

31.8
utopic

released

1:31.8.0+build1-0ubuntu0.14.10.1
vivid

released

1:31.8.0+build1-0ubuntu0.15.04.1

Показывать по

EPSS

Процентиль: 85%
0.0272
Низкий

9.3 Critical

CVSS2

Связанные уязвимости

redhat
около 10 лет назад

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

nvd
около 10 лет назад

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

debian
около 10 лет назад

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39. ...

github
около 3 лет назад

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

fstec
около 10 лет назад

Уязвимость почтового клиента Thunderbird, позволяющая нарушителю повлиять на работу программы

EPSS

Процентиль: 85%
0.0272
Низкий

9.3 Critical

CVSS2