Veracode Vulnerability DatabaseVERACODE:11874Denial Of Service (DoS)
0.048 Low
EPSS
Percentile
92.7%
Mozilla Firefox and Thunderbird are vulnerable to denial of service. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird.
References
lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html
lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html
lists.opensuse.org/opensuse-updates/2015-12/msg00104.html
lists.opensuse.org/opensuse-updates/2016-02/msg00007.html
lists.opensuse.org/opensuse-updates/2016-02/msg00008.html
rhn.redhat.com/errata/RHSA-2015-2657.html
www.debian.org/security/2015/dsa-3422
www.debian.org/security/2016/dsa-3432
www.mozilla.org/security/announce/2015/mfsa2015-134.html
www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
www.securityfocus.com/bid/79279
www.securitytracker.com/id/1034426
www.ubuntu.com/usn/USN-2833-1
www.ubuntu.com/usn/USN-2859-1
access.redhat.com/security/updates/classification/#critical
bugzilla.mozilla.org/show_bug.cgi?id=1203135
bugzilla.mozilla.org/show_bug.cgi?id=1224100
bugzilla.mozilla.org/show_bug.cgi?id=1225250
rhn.redhat.com/errata/RHSA-2015-2657.html
security.gentoo.org/glsa/201512-10
www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr38.5
Related
