What’s Vulnerable › Vulnerabilities

CVE-2015-2724

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-07-06 · updated 2026-06-17
• Weakness: CWE-119

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 14.10, 15.04
• Debian Linux: 7.0, 8.0
• Mozilla Firefox: through 38.1.0; 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1, 31.5.2 (+2)
• Mozilla Firefox ESR: 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0 (+1)
• Mozilla Thunderbird: through 38.0.1
• Novell Suse Linux Enterprise Desktop: 12.0
• Novell Suse Linux Enterprise Server: 11-sp4, 12.0
• Novell Suse Linux Enterprise Software Development Kit: 12.0
• Oracle Corporation Solaris Operating System: 11.3

References

• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html
• http://rhn.redhat.com/errata/RHSA-2015-1207.html
• http://rhn.redhat.com/errata/RHSA-2015-1455.html
• http://www.debian.org/security/2015/dsa-3300
• http://www.debian.org/security/2015/dsa-3324
• http://www.mozilla.org/security/announce/2015/mfsa2015-59.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Get alerted when CVE-2015-2724 or the next vulnerability affects your stack