Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
016.html - http://www.securitytracker.com/id/1033247 - https://bugzilla.mozilla.org/show_bug.cgi?id=1182723 - http://www.ubuntu.com/usn/USN-2702-2 - http://www.ubuntu.com/usn/USN-2702-1 - https://security.gentoo.org/glsa/201605-06 - http://www.securitytracker.com/id/1033372 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.debian.org/security/2015/dsa-3333 - http://www.mozilla.org/security/announce/2015/mfsa2015-90.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
CVE ID: CVE-2015-4490 State: PUBLISHED Published: 2015-08-16T01:00:00 Last Updated: 2024-08-06T06:18:11.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1086999 - http://www
Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1086999 - http://www.ubuntu.com/usn/USN-2702-3 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html - http://www.mozilla.org/security/announce/2015/mfsa2015-91.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1033247 - http://www.ubuntu.com/usn/USN-2702-2 - http://www.ubuntu.com/usn/USN-2702-1 - https://security.gentoo.org/glsa/201605-06 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
CVE ID: CVE-2015-4491 State: PUBLISHED Published: 2015-08-16T01:00:00 Last Updated: 2024-08-06T06:18:11.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/
scaling. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-88.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165701.html - http://www.debian.org/security/2015/dsa-3337 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=ffec86ed5010c5a2be14f47b33bcf4ed3169a199 - http://www.ubuntu.com/usn/USN-2712-1 - http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html - http://www.ubuntu.com/usn/USN-2702-3 - http://rhn.redhat.com/errata/RHSA-2015-1682.
suse-updates/2015-08/msg00031.html - http://www.ubuntu.com/usn/USN-2702-3 - http://rhn.redhat.com/errata/RHSA-2015-1682.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html - http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165732.html - http://rhn.redhat.com/errata/RHSA-2015-1586.html - https://bugzilla.redhat.com/show_bug.cgi?id=1252290 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165703.html - http://www.ubuntu.com/usn/USN-2722-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/open
2722-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html - http://www.securitytracker.com/id/1033247 - http://www.ubuntu.com/usn/USN-2702-2 - http://rhn.redhat.com/errata/RHSA-2015-1694.html - http://www.ubuntu.com/usn/USN-2702-1 - https://bugzilla.gnome.org/show_bug.cgi?id=752297 - https://bugzilla.mozilla.org/show_bug.cgi?id=1184009 - https://security.gentoo.org/glsa/201605-06 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165730.html - http://www.securitytracker.com/id/1033372 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html -
ttp://www.securitytracker.com/id/1033372 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - https://security.gentoo.org/glsa/201512-05 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-4492 State: PUBLISHED Published: 2015-08-16T01:00:00 Last Updated: 2024-08-06T06:18:11.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76297 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://www.mozilla.org/security/announce/2015/mfsa2015-92
pensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://www.mozilla.org/security/announce/2015/mfsa2015-92.html - http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html - http://www.ubuntu.com/usn/USN-2702-3 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html - http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html - http://rhn.redhat.com/errata/RHSA-2015-1586.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html - http://www.securitytracker.com/id/1033247 - http://www.ubuntu.com/usn/USN-2702-2 - http://www.ubuntu.com/usn/USN-
html - http://www.securitytracker.com/id/1033247 - http://www.ubuntu.com/usn/USN-2702-2 - http://www.ubuntu.com/usn/USN-2702-1 - https://security.gentoo.org/glsa/201605-06 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1185820 - http://www.debian.org/security/2015/dsa-3333 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
CVE ID: CVE-2015-4493 State: PUBLISHED Published: 2015-08-16T01:00:00 Last Updated: 2024-08-06T06:18:11.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html - http://www.ubuntu.com/usn/USN-2702-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=11867
pdates/2015-08/msg00031.html - http://www.ubuntu.com/usn/USN-2702-3 - https://bugzilla.mozilla.org/show_bug.cgi?id=1186718 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html - http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html - http://rhn.redhat.com/errata/RHSA-2015-1586.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2015/mfsa2015-83.html - http://www.securitytracker.com/id/1033247 - https://hg.mozilla.org/mozilla-central/rev/a674c7019cb5 - http://www.ubuntu.com/usn/USN-2702-2 - http://www.ubuntu.com/usn/USN-2702-1 - https://security.gentoo.org/glsa/201605-06 - http://ww
buntu.com/usn/USN-2702-2 - http://www.ubuntu.com/usn/USN-2702-1 - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2015/dsa-3333 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
CVE ID: CVE-2015-4494 State: PUBLISHED Published: 2015-08-08T00:00:00 Last Updated: 2024-08-06T06:18:11.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtain potentially sensitive information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-76.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1138808
CVE ID: CVE-2015-4495 State: PUBLISHED Published: 2015-08-08T00:00:00.000Z Last Updated: 2025-10-21T23:55:58.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1179262 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg
https://bugzilla.mozilla.org/show_bug.cgi?id=1179262 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html - http://www.securityfocus.com/bid/76249 - https://www.exploit-db.com/exploits/37772/ - http://rhn.redhat.com/errata/RHSA-2015-1581.html - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html - http://www.ubuntu.com/usn/USN-2707-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html - https://bugzilla.mozilla.org/show_
8.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1178058 - https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/ - http://www.mozilla.org/security/announce/2015/mfsa2015-78.html - http://www.securitytracker.com/id/1033216 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html
CVE ID: CVE-2015-4496 State: PUBLISHED Published: 2015-08-16T01:00:00 Last Updated: 2024-08-06T06:18:11.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1149605 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2015/mfsa2015-93.html - https://hg.mozilla.org/mozilla-central/rev/87277085561
http://www.mozilla.org/security/announce/2015/mfsa2015-93.html - https://hg.mozilla.org/mozilla-central/rev/87277085561a
CVE ID: CVE-2015-4497 State: PUBLISHED Published: 2015-08-29T19:00:00 Last Updated: 2024-08-06T06:18:11.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-94.html - http://www.debian.org/security/2015/dsa-3345 - http://lists.opensuse.
illa.org/security/announce/2015/mfsa2015-94.html - http://www.debian.org/security/2015/dsa-3345 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://www.ubuntu.com/usn/USN-2723-1 - http://www.zerodayinitiative.com/advisories/ZDI-15-406 - https://bugzilla.mozilla.org/show_bug.cgi?id=1175278 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html - http://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html - http://www.securityfocus.com/bid/76502 - http://rhn.redhat.com/errata/RHSA-2015-1693.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1164766 - ht
bid/76502 - http://rhn.redhat.com/errata/RHSA-2015-1693.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1164766 - http://www.securitytracker.com/id/1033397
CVE ID: CVE-2015-4498 State: PUBLISHED Published: 2015-08-29T19:00:00 Last Updated: 2024-08-06T06:18:11.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3345 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://www.ubun
rg/security/2015/dsa-3345 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://www.ubuntu.com/usn/USN-2723-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1042699 - http://www.securityfocus.com/bid/76505 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html - http://www.securitytracker.com/id/1033396 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html - http://rhn.redhat.com/errata/RHSA-2015-1693.html - http://www.mozilla.org/security/announce/2015/mfsa2015-95.html
CVE ID: CVE-2015-4499 State: PUBLISHED Published: 2015-09-14T01:00:00 Last Updated: 2024-08-06T06:18:11.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/20
ional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169946.html - http://www.securitytracker.com/id/1033542 - http://seclists.org/bugtraq/2015/Sep/48 - https://bug1202447.bmoattachments.org/attachment.cgi?id=8657861 - http://seclists.org/bugtraq/2015/Sep/49 - http://packetstormsecurity.com/files/133578/Bugzilla-Unauthorized-Account-Creation.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168725.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169983.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1202447
CVE ID: CVE-2015-4500 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1152026 - http://lists.opensuse.org/opensuse-security-announce/2015-11/m
- https://bugzilla.mozilla.org/show_bug.cgi?id=1152026 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1202844 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.ubuntu.com/usn/USN-2754-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1044077 - http://www.ubuntu.com/usn/USN-2743-4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.mozilla.org/security/announce/2015/mfsa2015-96.html - http://www.ubuntu.com/usn/USN-2743-3 - http://rhn.redhat.com/errata/
zilla.org/security/announce/2015/mfsa2015-96.html - http://www.ubuntu.com/usn/USN-2743-3 - http://rhn.redhat.com/errata/RHSA-2015-1834.html - http://www.ubuntu.com/usn/USN-2743-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1186962 - http://www.securitytracker.com/id/1033640 - https://bugzilla.mozilla.org/show_bug.cgi?id=1183153 - http://rhn.redhat.com/errata/RHSA-2015-1852.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1161063 - http://www.debian.org/security/2015/dsa-3365 - http://www.securityfocus.com/bid/76816 - https://bugzilla.mozilla.org/show_bug.cgi?id=1181651 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html - http://lists.opensuse.org/opensuse-secu
1 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - http://www.ubuntu.com/usn/USN-2743-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1201793
CVE ID: CVE-2015-4501 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.htm
suse-security-announce/2015-11/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.ubuntu.com/usn/USN-2743-4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2015/mfsa2015-96.html - http://www.ubuntu.com/usn/USN-2743-3 - http://www.ubuntu.com/usn/USN-2743-2 - http://www.securitytracker.com/id/1033640 - https://bugzilla.mozilla.org/show_bug.cgi?id=1165706 - http://www.securityfocus.com/bid/76816 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - http://www.ubuntu.c
2015-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - http://www.ubuntu.com/usn/USN-2743-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1186657
CVE ID: CVE-2015-4502 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1105045 - https://hg.mozilla.org/mozilla-central/rev/dc21224de25b - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.mozilla.org/security/announce/2015/mfsa2015-108.html - http://www.ubuntu.
ty-announce/2015-10/msg00005.html - http://www.mozilla.org/security/announce/2015/mfsa2015-108.html - http://www.ubuntu.com/usn/USN-2743-4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2743-3 - http://www.securityfocus.com/bid/76815 - http://www.ubuntu.com/usn/USN-2743-2 - http://www.securitytracker.com/id/1033640 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - http://www.ubuntu.com/usn/USN-2743-1
CVE ID: CVE-2015-4503 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a navigator.mozTCPSocket.open method call and send method calls, which allows remote TCP servers to obtain sensitive information from process memory by reading packet data, as demonstrated by availability of this API in a Firefox OS application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.mozilla.org/s
ner: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.mozilla.org/security/announce/2015/mfsa2015-97.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/76815 - http://www.securitytracker.com/id/1033640 - https://bugzilla.mozilla.org/show_bug.cgi?id=994337 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
CVE ID: CVE-2015-4504 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-98.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1132467 - ht
pensuse.org/opensuse-security-announce/2015-10/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1132467 - http://www.ubuntu.com/usn/USN-2743-4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2743-3 - http://www.securityfocus.com/bid/76815 - http://www.ubuntu.com/usn/USN-2743-2 - http://www.securitytracker.com/id/1033640 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - http://www.ubuntu.com/usn/USN-2743-1
CVE ID: CVE-2015-4505 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-100.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1177861 - http://www.oracle.com/technetwo