CVE-2015-2709: mozilla firefox

EPSS trend

Probability

4.22%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.22% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

23 links

www.ubuntu.com/usn/USN-2602-1Vendor AdvisoryX Refsource UBUNTU
bugzilla.mozilla.org/show_bug.cgi?id=1111251X Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=1117977X Refsource CONFIRM
www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/X Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=1153688X Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=1143194X Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=1155474X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.htmlVendor AdvisoryX Refsource SUSE
bugzilla.mozilla.org/show_bug.cgi?id=1128064X Refsource CONFIRM
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRM

Show all 23 references

www.mozilla.org/security/announce/2015/mfsa2015-46.htmlX Refsource CONFIRMVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1146101X Refsource CONFIRM
bugzilla.mozilla.org/show_bug.cgi?id=1135066X Refsource CONFIRM
lists.opensuse.org/opensuse-updates/2015-05/msg00036.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.htmlVendor AdvisoryX Refsource SUSE
bugzilla.mozilla.org/show_bug.cgi?id=1149526X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2015-1012.htmlVendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/201605-06Vendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/74615VDB EntryX Refsource BID
ubuntu.com/security/CVE-2015-2709REPORT
www.mozilla.org/en-US/security/advisories/mfsa2015-46/REPORT
ubuntu.com/security/notices/USN-2602-1Advisory
www.cve.org/CVERecord?id=CVE-2015-2709REPORT

Related vulnerabilities

CVE-2013-1379adobeadobe_air+46.23%13y ago10-04-2013 01:00Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2013-4419debianlibguestfs+170.75%12y ago05-11-2013 20:00The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.CVE-2013-4357canonicalubuntu_linux+43.23%6y ago31-12-2019 18:34The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.CVE-2013-3567canonicalubuntu_linux+103.41%13y ago19-08-2013 23:00Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.CVE-2015-2733ubuntufirefox+56.14%11y ago06-07-2015 01:00Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.CVE-2015-2743ubuntufirefox+64.71%11y ago06-07-2015 01:00PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.

All vulnerabilities infirefox suse_linux_enterprise_desktop suse_linux_enterprise_server suse_linux_enterprise_software_development_kit opensuse

CVE-2015-2709: mozilla firefox

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References