Lucene search

[email protected]NVD:CVE-2015-2739

HistoryJul 06, 2015 - 2:01 a.m.

CVE-2015-2739

2015-07-0602:01:07

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.

Affected configurations

Nvd

Node

mozillafirefoxRange≤38.1.0

Node

novellsuse_linux_enterprise_software_development_kitMatch12.0

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch14.10

canonicalubuntu_linuxMatch15.04

novellsuse_linux_enterprise_desktopMatch12.0

novellsuse_linux_enterprise_serverMatch11sp4

novellsuse_linux_enterprise_serverMatch12.0

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

Node

mozillafirefox_esrMatch31.0

mozillafirefox_esrMatch31.1

mozillafirefox_esrMatch31.1.0

mozillafirefox_esrMatch31.1.1

mozillafirefox_esrMatch31.2

mozillafirefox_esrMatch31.3

mozillafirefox_esrMatch31.3.0

mozillafirefox_esrMatch31.4

mozillafirefox_esrMatch31.5

mozillafirefox_esrMatch31.5.1

mozillafirefox_esrMatch31.5.2

mozillafirefox_esrMatch31.5.3

mozillafirefox_esrMatch31.6.0

mozillafirefox_esrMatch31.7.0

mozillafirefox_esrMatch38.0

Node

oraclesolarisMatch11.3

Node

mozillathunderbirdRange≤38.0.1

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
novellsuse_linux_enterprise_software_development_kit12.0cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
canonicalubuntu_linux14.10cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
canonicalubuntu_linux15.04cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
novellsuse_linux_enterprise_desktop12.0cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
novellsuse_linux_enterprise_server11cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
novellsuse_linux_enterprise_server12.0cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
novell	suse_linux_enterprise_software_development_kit	12.0	cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:::::::*
canonical	ubuntu_linux	12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
canonical	ubuntu_linux	14.10	cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*
canonical	ubuntu_linux	15.04	cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::*
novell	suse_linux_enterprise_desktop	12.0	cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:::::::*
novell	suse_linux_enterprise_server	11	cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4::::::
novell	suse_linux_enterprise_server	12.0	cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:::::::*
debian	debian_linux	7.0	cpe:2.3:o:debian:debian_linux:7.0:::::::*