csaf_redhat - rhsa-2015

rhsa-2015_2519

Vulnerability from csaf_redhat

Published

2015-11-26 13:41

Modified

2024-11-22 09:33

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2015-4513, CVE-2015-7189, CVE-2015-7197, CVE-2015-7198, CVE-2015-7199, CVE-2015-7200) A same-origin policy bypass flaw was found in the way Thunderbird handled certain cross-origin resource sharing (CORS) requests. A web page containing malicious content could cause Thunderbird to disclose sensitive information. (CVE-2015-7193) Note: All of the above issues cannot be exploited by a specially crafted HTML mail message because JavaScript is disabled by default for mail messages. However, they could be exploited in other ways in Thunderbird (for example, by viewing the full remote content of an RSS feed). Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Christian Holler, David Major, Jesse Ruderman, Tyson Smith, Boris Zbarsky, Randell Jesup, Olli Pettay, Karl Tomlinson, Jeff Walden, Gary Kwong, Looben Yang, Shinto K Anto, Ronald Crane, and Ehsan Akhgari as the original reporters of these issues. For technical details regarding these flaws, refer to the Mozilla security advisories for Thunderbird 38.4.0. You can find a link to the Mozilla advisories in the References section of this erratum. All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 38.4.0, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes multiple security issues is now\navailable for Red Hat Enterprise Linux 5, 6, and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Thunderbird to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nThunderbird. (CVE-2015-4513, CVE-2015-7189, CVE-2015-7197, CVE-2015-7198,\nCVE-2015-7199, CVE-2015-7200)\n\nA same-origin policy bypass flaw was found in the way Thunderbird handled\ncertain cross-origin resource sharing (CORS) requests. A web page\ncontaining malicious content could cause Thunderbird to disclose sensitive\ninformation. (CVE-2015-7193)\n\nNote: All of the above issues cannot be exploited by a specially crafted\nHTML mail message because JavaScript is disabled by default for mail\nmessages. However, they could be exploited in other ways in Thunderbird\n(for example, by viewing the full remote content of an RSS feed).\n\nRed Hat would like to thank the Mozilla project for reporting this issue.\nUpstream acknowledges Christian Holler, David Major, Jesse Ruderman, Tyson\nSmith, Boris Zbarsky, Randell Jesup, Olli Pettay, Karl Tomlinson, Jeff\nWalden, Gary Kwong, Looben Yang, Shinto K Anto, Ronald Crane, and Ehsan\nAkhgari as the original reporters of these issues.\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Thunderbird 38.4.0. You can find a link to the Mozilla\nadvisories in the References section of this erratum.\n\nAll Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 38.4.0, which corrects these issues. After\ninstalling the update, Thunderbird must be restarted for the changes to\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:2519",
        "url": "https://access.redhat.com/errata/RHSA-2015:2519"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.4",
        "url": "https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.4"
      },
      {
        "category": "external",
        "summary": "1277332",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277332"
      },
      {
        "category": "external",
        "summary": "1277344",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277344"
      },
      {
        "category": "external",
        "summary": "1277346",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277346"
      },
      {
        "category": "external",
        "summary": "1277350",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277350"
      },
      {
        "category": "external",
        "summary": "1277351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277351"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2519.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T09:33:59+00:00",
      "generator": {
        "date": "2024-11-22T09:33:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2015:2519",
      "initial_release_date": "2015-11-26T13:41:00+00:00",
      "revision_history": [
        {
          "date": "2015-11-26T13:41:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-11-26T13:41:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T09:33:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS-5.11.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.11.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client-7.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-7.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el5_11?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el5_11.i386",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el5_11.i386",
                  "product_id": "thunderbird-0:38.4.0-1.el5_11.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el5_11?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el5_11.x86_64",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el5_11.x86_64",
                  "product_id": "thunderbird-0:38.4.0-1.el5_11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el5_11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el6_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el6_7.x86_64",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el6_7.x86_64",
                  "product_id": "thunderbird-0:38.4.0-1.el6_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el6_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el7_2.x86_64",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el7_2.x86_64",
                  "product_id": "thunderbird-0:38.4.0-1.el7_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el7_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el7_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el5_11.src",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el5_11.src",
                  "product_id": "thunderbird-0:38.4.0-1.el5_11.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el5_11?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el6_7.src",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el6_7.src",
                  "product_id": "thunderbird-0:38.4.0-1.el6_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el6_7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el7_2.src",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el7_2.src",
                  "product_id": "thunderbird-0:38.4.0-1.el7_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el7_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el6_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el6_7.i686",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el6_7.i686",
                  "product_id": "thunderbird-0:38.4.0-1.el6_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el6_7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el6_7.s390x",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el6_7.s390x",
                  "product_id": "thunderbird-0:38.4.0-1.el6_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el6_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el6_7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el6_7?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el6_7.ppc64",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el6_7.ppc64",
                  "product_id": "thunderbird-0:38.4.0-1.el6_7.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el6_7?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:38.4.0-1.el7_2.ppc64le",
                "product": {
                  "name": "thunderbird-0:38.4.0-1.el7_2.ppc64le",
                  "product_id": "thunderbird-0:38.4.0-1.el7_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@38.4.0-1.el7_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
                "product": {
                  "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
                  "product_id": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@38.4.0-1.el7_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el5_11.src",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
        "relates_to_product_reference": "5Client-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el5_11.i386",
        "relates_to_product_reference": "5Server-DPAS-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el5_11.src as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el5_11.src",
        "relates_to_product_reference": "5Server-DPAS-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el5_11.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
        "relates_to_product_reference": "5Server-DPAS-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.11.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.i686",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.ppc64",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.s390x",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.src",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.x86_64",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
        "relates_to_product_reference": "6Client-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.i686",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.ppc64",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.s390x",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.src",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.x86_64",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.i686",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.ppc64",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.s390x",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.src",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el6_7.x86_64",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
        "relates_to_product_reference": "6Workstation-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.ppc64le",
        "relates_to_product_reference": "7Client-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.src",
        "relates_to_product_reference": "7Client-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.x86_64",
        "relates_to_product_reference": "7Client-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
        "relates_to_product_reference": "7Client-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
        "relates_to_product_reference": "7Client-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.src",
        "relates_to_product_reference": "7Server-optional-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.ppc64le",
        "relates_to_product_reference": "7Workstation-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.src",
        "relates_to_product_reference": "7Workstation-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:38.4.0-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64"
        },
        "product_reference": "thunderbird-0:38.4.0-1.el7_2.x86_64",
        "relates_to_product_reference": "7Workstation-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
        "relates_to_product_reference": "7Workstation-7.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
        "relates_to_product_reference": "7Workstation-7.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2015-4513",
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277332"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:38.4) (MFSA 2015-116)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-4513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277332",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277332"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-4513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-4513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-4513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4513"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-116.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-116.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:38.4) (MFSA 2015-116)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Looben Yang"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2015-7189",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277344"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277344",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277344"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7189"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-123.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-123.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Shinto K Anto"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2015-7193",
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277346"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7193"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277346",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277346"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7193",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7193"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7193",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7193"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-127.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-127.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Ehsan Akhgari"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2015-7197",
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7197"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-132.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-132.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Ronald Crane"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2015-7198",
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277350"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7198"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277350",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277350"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7198",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7198"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7198",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7198"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-131.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Ronald Crane"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2015-7199",
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277350"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277350",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277350"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7199"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-131.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Ronald Crane"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2015-7200",
      "discovery_date": "2015-11-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1277350"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
          "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
          "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
          "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
          "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
          "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
          "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-7200"
        },
        {
          "category": "external",
          "summary": "RHBZ#1277350",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1277350"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-7200",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-7200"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-7200",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7200"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/announce/2015/mfsa2015-131.html",
          "url": "https://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
        }
      ],
      "release_date": "2015-11-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-11-26T13:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:2519"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Client-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Client-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.src",
            "5Server-DPAS-5.11.Z:thunderbird-0:38.4.0-1.el5_11.x86_64",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.i386",
            "5Server-DPAS-5.11.Z:thunderbird-debuginfo-0:38.4.0-1.el5_11.x86_64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Client-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Client-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Server-optional-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Server-optional-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.src",
            "6Workstation-6.7.z:thunderbird-0:38.4.0-1.el6_7.x86_64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.i686",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.ppc64",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.s390x",
            "6Workstation-6.7.z:thunderbird-debuginfo-0:38.4.0-1.el6_7.x86_64",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Client-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Client-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Server-optional-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Server-optional-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.src",
            "7Workstation-7.2.Z:thunderbird-0:38.4.0-1.el7_2.x86_64",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.ppc64le",
            "7Workstation-7.2.Z:thunderbird-debuginfo-0:38.4.0-1.el7_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)"
    }
  ]
}

cve-2015-4513

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 06:18

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=1193038	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1107011	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1204700	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1204669	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1208665	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1206564	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1191942	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1204580	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1209471	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2015/mfsa2015-116.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1205707	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1213979	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:18:11.486Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1193038"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1107011"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204700"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204669"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1208665"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1206564"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1191942"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204580"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209471"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-116.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205707"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1213979"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1193038"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1107011"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204700"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204669"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1208665"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1206564"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1191942"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204580"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209471"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-116.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205707"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1213979"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-4513",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1193038",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1193038"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1107011",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1107011"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204700",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204700"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204669",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204669"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1208665",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1208665"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1206564",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1206564"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1191942",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1191942"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204580",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204580"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209471",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1209471"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-116.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-116.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205707",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205707"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1213979",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1213979"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-4513",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-06-10T00:00:00",
    "dateUpdated": "2024-08-06T06:18:11.486Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7193

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 07:43

Severity ?

Summary

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1210302	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2015/mfsa2015-127.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:43:45.004Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1210302"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-127.html"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1210302"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-127.html"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-7193",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1210302",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1210302"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-127.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-127.html"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-7193",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-09-16T00:00:00",
    "dateUpdated": "2024-08-06T07:43:45.004Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7200

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 07:43

Severity ?

Summary

The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1204155	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2015/mfsa2015-131.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:43:45.440Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204155"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204155"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-7200",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204155",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204155"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-7200",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-09-16T00:00:00",
    "dateUpdated": "2024-08-06T07:43:45.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7197

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 07:43

Severity ?

Summary

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1204269	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2015/mfsa2015-132.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:43:45.014Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204269"
          },
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-132.html"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204269"
        },
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-132.html"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-7197",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204269",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204269"
            },
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-132.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-132.html"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-7197",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-09-16T00:00:00",
    "dateUpdated": "2024-08-06T07:43:45.014Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7189

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 07:43

Severity ?

Summary

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2015/mfsa2015-123.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1205900	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:43:44.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-123.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205900"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-123.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205900"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-7189",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-123.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-123.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205900",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1205900"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-7189",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-09-16T00:00:00",
    "dateUpdated": "2024-08-06T07:43:44.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7198

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 07:43

Severity ?

Summary

Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2015/mfsa2015-131.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=1188010	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:43:44.888Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1188010"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1188010"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-7198",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1188010",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1188010"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-7198",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-09-16T00:00:00",
    "dateUpdated": "2024-08-06T07:43:44.888Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7199

Vulnerability from cvelistv5

Published

2015-11-05 02:00

Modified

2024-08-06 07:43

Severity ?

Summary

The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1034069	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3410	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201512-10	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77411	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-2519.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2785-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1982.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2819-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2015/mfsa2015-131.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2015/dsa-3393	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1204061	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:43:44.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034069",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034069"
          },
          {
            "name": "DSA-3410",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3410"
          },
          {
            "name": "SUSE-SU-2015:2081",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
          },
          {
            "name": "GLSA-201512-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201512-10"
          },
          {
            "name": "77411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/77411"
          },
          {
            "name": "SUSE-SU-2015:1981",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2015:2229",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
          },
          {
            "name": "RHSA-2015:2519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
          },
          {
            "name": "USN-2785-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2785-1"
          },
          {
            "name": "SUSE-SU-2015:1926",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
          },
          {
            "name": "USN-2819-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2819-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
          },
          {
            "name": "openSUSE-SU-2015:1942",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
          },
          {
            "name": "DSA-3393",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3393"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204061"
          },
          {
            "name": "openSUSE-SU-2015:2245",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
          },
          {
            "name": "SUSE-SU-2015:1978",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1034069",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034069"
        },
        {
          "name": "DSA-3410",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3410"
        },
        {
          "name": "SUSE-SU-2015:2081",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
        },
        {
          "name": "GLSA-201512-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201512-10"
        },
        {
          "name": "77411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/77411"
        },
        {
          "name": "SUSE-SU-2015:1981",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
        },
        {
          "name": "openSUSE-SU-2015:2229",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
        },
        {
          "name": "RHSA-2015:2519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
        },
        {
          "name": "USN-2785-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2785-1"
        },
        {
          "name": "SUSE-SU-2015:1926",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
        },
        {
          "name": "USN-2819-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2819-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
        },
        {
          "name": "openSUSE-SU-2015:1942",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
        },
        {
          "name": "DSA-3393",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3393"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204061"
        },
        {
          "name": "openSUSE-SU-2015:2245",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
        },
        {
          "name": "SUSE-SU-2015:1978",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2015-7199",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034069",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034069"
            },
            {
              "name": "DSA-3410",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3410"
            },
            {
              "name": "SUSE-SU-2015:2081",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html"
            },
            {
              "name": "GLSA-201512-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201512-10"
            },
            {
              "name": "77411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/77411"
            },
            {
              "name": "SUSE-SU-2015:1981",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2015:2229",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html"
            },
            {
              "name": "RHSA-2015:2519",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-2519.html"
            },
            {
              "name": "USN-2785-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2785-1"
            },
            {
              "name": "SUSE-SU-2015:1926",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "RHSA-2015:1982",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1982.html"
            },
            {
              "name": "USN-2819-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2819-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-131.html"
            },
            {
              "name": "openSUSE-SU-2015:1942",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html"
            },
            {
              "name": "DSA-3393",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3393"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204061",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1204061"
            },
            {
              "name": "openSUSE-SU-2015:2245",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html"
            },
            {
              "name": "SUSE-SU-2015:1978",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2015-7199",
    "datePublished": "2015-11-05T02:00:00",
    "dateReserved": "2015-09-16T00:00:00",
    "dateUpdated": "2024-08-06T07:43:44.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature