SUSE-SU-2015:2335-1

Advisory lineage Upstream: 8 Downstream: 0
Published: 21 Dec 2015, 16:19
Last modified:04 Feb 2026, 02:53

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Dec 2015, 16:19
Published
Vulnerability first disclosed
04 Feb 2026, 02:53
Last Modified
Vulnerability information updated

Description

Security update for MozillaFirefox MozillaFirefox was updated to version 38.5.0 ESR to fix the following issues: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 A use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 An integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 A underflow found through code inspection * MFSA 2015-146/CVE-2015-7213 A integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs

Affected Systems

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Desktop 12 SP1

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 12

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP1

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12

    < 38.5.0esr-54.1

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Software Development Kit 12 SP1

    < 38.5.0esr-54.1

References (10)