Lucene search
Mozilla FoundationMFSA2015-34HistoryMar 31, 2015 - 12:00 a.m.
Out of bounds read in QCMS library — Mozilla
2015-03-3100:00:00
Mozilla Foundation
www.mozilla.org
25
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
EPSS
0.027
Percentile
90.6%
Security researcher Felix Gröbert of Google used the Address Sanitizer tool to discover an out of bounds read in the QCMS color management library while transforming images with certain parameters. This could lead to information disclosure.
Affected configurations
Node
mozillafirefoxRange<37
ORmozillafirefox_osRange<2.2
ORmozillaseamonkeyRange<2.35
Related
prion
prion
Out-of-bounds
2015-04-01 10:59:00
ubuntucve
ubuntucve
CVE-2015-0811
2015-04-01 00:00:00
cvelist
cvelist
CVE-2015-0811
2015-04-01 10:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-34) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Windows
2015-04-06 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Mac OS X
2015-04-06 00:00:00
nvd
nvd
CVE-2015-0811
2015-04-01 10:59:10
cve
cve
CVE-2015-0811
2015-04-01 10:59:10
kaspersky
kaspersky
nessus
nessus
Firefox < 37.0 Multiple Vulnerabilities
2015-04-01 00:00:00
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2550-1)
2015-04-02 00:00:00
Firefox < 37.0 Multiple Vulnerabilities (Mac OS X)
2015-04-01 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-04-01 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-04-01 00:00:00
suse
suse
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-03-31 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-04-08 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
EPSS
0.027
Percentile
90.6%
Related for MFSA2015-34