SUSE-SU-2015:2336-1: MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2015:2336-1 is a vulnerability in MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise with no CVSS score yet.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 8 · Downstream 0 · Related 8Timeline
- 21-12-2015PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for MozillaFirefox MozillaFirefox was updated to version 38.5.0 ESR. It fixes the following security issues: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 Integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 Underflow through code inspection * MFSA 2015-146/CVE-2015-7213 Integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Suse1 product
- MozillaFirefox&distro=SUSE Linux Enterprise Server 11 SP2-LTSS< 38.5.0esr-28.2
1 vendor · 1 product
References
10 links- bugzilla.suse.com/959277REPORT