SUSE-SU-2015:2336-1

Advisory lineage Upstream: 8 Downstream: 0
Published: 21 Dec 2015, 16:19
Last modified:04 Feb 2026, 03:49

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Dec 2015, 16:19
Published
Vulnerability first disclosed
04 Feb 2026, 03:49
Last Modified
Vulnerability information updated

Description

Security update for MozillaFirefox MozillaFirefox was updated to version 38.5.0 ESR. It fixes the following security issues: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 Integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 Underflow through code inspection * MFSA 2015-146/CVE-2015-7213 Integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs

Affected Systems

  • suse•MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP2-LTSS

    < 38.5.0esr-28.2

References (10)