Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0785 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:09.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7016431 - http://www.zerodayinitiative.com/advisories/ZDI-15-152 - http://www.securityfocus.com/bid/74288
CVE ID: CVE-2015-0786 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:26:10.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032166 - https://www.novell.com/support/kb/doc.php?id=7016431 - http://www.securityfocus.com/bid/74290 - http://www.zerodayinitiative.com/advisories/ZDI-15-153
CVE ID: CVE-2015-0787 State: PUBLISHED Published: 2016-10-27T20:00:00 Last Updated: 2024-08-06T04:26:10.156Z Vendors: n/a Products: NetIQ Designer for Identity Manager before 4.5.3 Problem Types: unspecified Description: XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93972 - https://download.novell.com/Download?buildid=QgHXVOxv310~
CVE ID: CVE-2015-0788 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:54 Description: No description available.
CVE ID: CVE-2015-0789 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:41 Description: No description available.
CVE ID: CVE-2015-0790 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:52 Description: No description available.
CVE ID: CVE-2015-0791 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:59 Description: No description available.
CVE ID: CVE-2015-0792 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:25 Description: No description available.
CVE ID: CVE-2015-0793 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:56 Description: No description available.
CVE ID: CVE-2015-0794 State: PUBLISHED Published: 2015-11-19T20:00:00 Last Updated: 2024-08-06T04:26:10.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-bugs/2015-06/msg02580.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00098.html - http://lists.opensuse.org/opensuse-bugs/2015-06/msg02585.html
CVE ID: CVE-2015-0795 State: PUBLISHED Published: 2015-07-18T10:00:00 Last Updated: 2024-08-06T04:26:10.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-340/ - https://www.netiq.com/support/kb/doc.php?id=7016656
CVE ID: CVE-2015-0796 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-16T23:56:32.388Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SUSE Products: open build service Problem Types: creation of non-standard files, CWE-434 Description: In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=9
ce service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=941099 - https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc0b1cc90b0097fc
CVE ID: CVE-2015-0797 State: PUBLISHED Published: 2015-05-14T10:00:00 Last Updated: 2024-08-06T04:26:10.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0988.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - http://www.mozilla
88.html - https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 - http://www.mozilla.org/security/announce/2015/mfsa2015-47.html - https://security.gentoo.org/glsa/201512-07 - http://www.debian.org/security/2015/dsa-3264 - http://www.debian.org/security/2015/dsa-3260 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1080995 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - http://rhn.redhat.com/errat
msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html - http://rhn.redhat.com/errata/RHSA-2015-1012.html - http://www.debian.org/security/2015/dsa-3225 - https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
CVE ID: CVE-2015-0798 State: PUBLISHED Published: 2015-04-08T10:00:00 Last Updated: 2024-08-06T04:26:11.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-43.html - http://www.securitytracker.com/id/1032029 - http:/
10 - http://www.mozilla.org/security/announce/2015/mfsa2015-43.html - http://www.securitytracker.com/id/1032029 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1147597
CVE ID: CVE-2015-0799 State: PUBLISHED Published: 2015-04-08T10:00:00 Last Updated: 2024-08-06T04:26:10.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2557-1 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-44.html - http://www.oracle.com/technetwork/topics/security/
10 - http://www.mozilla.org/security/announce/2015/mfsa2015-44.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1148328 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html - http://www.securitytracker.com/id/1032030
CVE ID: CVE-2015-0800 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - http://www.mozilla.org/security/announce/2015/mfsa2015-41.html - http://www.oracle.com/technetwork/topics/securit
1996 - http://www.mozilla.org/security/announce/2015/mfsa2015-41.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1110212
CVE ID: CVE-2015-0801 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1146339 - http://www.securitytracker.com/id/1031996 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://secu
curitytracker.com/id/1031996 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://security.gentoo.org/glsa/201512-10 - http://www.debian.org/security/2015/dsa-3212 - http://www.mozilla.org/security/announce/2015/mfsa2015-40.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html - http://www.ubuntu.com/usn/USN-2552-1 - http://rhn.redhat.com/errata/RHSA-2015-0766.html - http://www.securityfocus.com/bid/73455 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2550-1 - http://www.securitytracker.com
opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2550-1 - http://www.securitytracker.com/id/1032000 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html - http://rhn.redhat.com/errata/RHSA-2015-0771.html - http://www.debian.org/security/2015/dsa-3211
CVE ID: CVE-2015-0802 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:11.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1124898 - http://www.securitytra
es: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1124898 - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-42.html - https://www.exploit-db.com/exploits/37958/ - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0803 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfs
ytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-39.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1134561 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0804 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:11.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/securi
- http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-39.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1134560 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0805 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:11.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://security.gentoo.or
yst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1135511 - http://www.mozilla.org/security/announce/2015/mfsa2015-38.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0806 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:11.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://bugzilla.
onal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://bugzilla.mozilla.org/show_bug.cgi?id=1099437 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-38.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0807 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73457 - http://www.securitytra
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73457 - http://www.securitytracker.com/id/1031996 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://security.gentoo.org/glsa/201512-10 - http://www.debian.org/security/2015/dsa-3212 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html - http://www.ubuntu.com/usn/USN-2552-1 - http://rhn.redhat.com/errata/RHSA-2015-0766.html - http://www.mozilla.org/security/announce/2015/mfsa2015-37.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html -
ics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1111834 - http://www.ubuntu.com/usn/USN-2550-1 - http://www.securitytracker.com/id/1032000 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html - http://rhn.redhat.com/errata/RHSA-2015-0771.html - http://www.debian.org/security/2015/dsa-3211
CVE ID: CVE-2015-0808 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-36.html - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - https://bugz
mfsa2015-36.html - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1109552 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0810 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - http://www.mozilla.org/security/announce/2015/mfsa2015-35.html - https://security.gentoo.org/glsa/201512-10 - http://www.oracle
www.mozilla.org/security/announce/2015/mfsa2015-35.html - https://security.gentoo.org/glsa/201512-10 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1125013
CVE ID: CVE-2015-0811 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a denial of service (out-of-bounds read) via an image that is improperly handled during transformation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1132468 - http://www.mozilla.org/security/announce/2015/mfsa2015-34.html - http://ww
ugzilla.mozilla.org/show_bug.cgi?id=1132468 - http://www.mozilla.org/security/announce/2015/mfsa2015-34.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0812 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:10.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031996 - https://bugzilla.mozilla.org/show_bug.cgi?id=1128126 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org
tps://bugzilla.mozilla.org/show_bug.cgi?id=1128126 - https://security.gentoo.org/glsa/201512-10 - http://www.mozilla.org/security/announce/2015/mfsa2015-32.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2550-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html
CVE ID: CVE-2015-0813 State: PUBLISHED Published: 2015-04-01T10:00:00 Last Updated: 2024-08-06T04:26:11.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73463 - http://www.securitytracker.com/id/1031996 - http://lists.opensuse.org/opensuse-security
ww.securityfocus.com/bid/73463 - http://www.securitytracker.com/id/1031996 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html - https://security.gentoo.org/glsa/201512-10 - http://www.debian.org/security/2015/dsa-3212 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html - http://www.ubuntu.com/usn/USN-2552-1 - http://rhn.redhat.com/errata/RHSA-2015-0766.html - http://www.mozilla.org/security/announce/2015/mfsa2015-31.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2550-1 - http://www.securitytracke
.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2550-1 - http://www.securitytracker.com/id/1032000 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html - http://rhn.redhat.com/errata/RHSA-2015-0771.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1106596 - http://www.debian.org/security/2015/dsa-3211