CVE-2015-0836

Mozilla: Miscellaneous memory safety hazards (rv:31.5) (MFSA 2015-11)

Published Feb 25, 2015 CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3174-1 iceweasel security update
Debian DSA Debian DSA DSA-3179-1 icedove security update
EUVD EUVD EUVD-2015-0849 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Ubuntu USN Ubuntu USN USN-2505-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2506-1 Thunderbird vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2015-0265.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2015-0266.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2015-0642.html cve-icon cve-icon
http://www.debian.org/security/2015/dsa-3174 cve-icon cve-icon
http://www.debian.org/security/2015/dsa-3179 cve-icon cve-icon
http://www.mozilla.org/security/announce/2015/mfsa2015-11.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html cve-icon cve-icon
http://www.securityfocus.com/bid/72742 cve-icon cve-icon
http://www.securitytracker.com/id/1031791 cve-icon cve-icon
http://www.securitytracker.com/id/1031792 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2505-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2506-1 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1096138 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1107009 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1111243 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1111248 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1115776 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1117406 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1119579 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1123882 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1124018 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=1128196 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2015-0836 cve-icon
https://security.gentoo.org/glsa/201504-01 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2015-0836 cve-icon
https://www.mozilla.org/en-US/security/advisories/mfsa2015-11 cve-icon
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:31.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 4:26 AM
Reserved
Jan 7, 2015, 12:00 AM
Status
Modified
Published
Feb 25, 2015, 11:59 AM
Modified
Jun 17, 2026, 12:21 AM
Severity
Critical
Public date
Feb 24, 2015, 12:00 AM