Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox esr 38.0.5 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2016-2804
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 46.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.5.2Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla FirefoxMozilla Firefox Esr 38.7.1Mozilla Firefox Esr 38.7.0Mozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1
10
CVSSv2
CVE-2015-4486
The decrease_ref_count function in libvpx in Mozilla Firefox prior to 40.0 and Firefox ESR 38.x prior to 38.2 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Opensuse Opensuse 13.1Opensuse Opensuse 13.2Canonical Ubuntu Linux 12.04Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.0.1Mozilla FirefoxMozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.1.0Oracle Solaris 11.3
9.3
CVSSv2
CVE-2016-2794
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other...
Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Sil Graphite2Suse Linux Enterprise 12.0Opensuse Opensuse 13.1Opensuse Leap 42.1Opensuse Opensuse 13.2Oracle Linux 6Oracle Linux 7Oracle Linux 5.0
9.3
CVSSv2
CVE-2016-2799
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 prior to 1.3.6, as used in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via ...
Oracle Linux 5.0Oracle Linux 7Oracle Linux 6Opensuse Opensuse 13.1Opensuse Opensuse 13.2Suse Linux Enterprise 12.0Opensuse Leap 42.1Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Sil Graphite2
7.5
CVSSv2
CVE-2015-4514
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 42.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla FirefoxMozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.0.1
7.5
CVSSv2
CVE-2015-4517
NetworkUtils.cpp in Mozilla Firefox prior to 41.0 and Firefox ESR 38.x prior to 38.3 might allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
Mozilla FirefoxMozilla Firefox Esr 38.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.2.0
7.5
CVSSv2
CVE-2015-7178
The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox prior to 41.0 and Firefox ESR 38.x prior to 38.3 on Windows, mishandles shader access, which allows remote malicious users to execute arbitrary code or cause a denial of service (memory cor...
Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.2.1Mozilla Firefox
7.5
CVSSv2
CVE-2015-7179
The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox prior to 41.0 and Firefox ESR 38.x prior to 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote malicious users to execute arbitrary c...
Mozilla FirefoxMozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.2.0Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.1.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.0Mozilla Firefox Esr 38.0.1
7.5
CVSSv2
CVE-2015-4475
The mozilla::AudioSink function in Mozilla Firefox prior to 40.0 and Firefox ESR 38.x prior to 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds read) via a ...
Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.1.0Mozilla FirefoxMozilla Firefox Esr 38.0Canonical Ubuntu Linux 15.04Opensuse Opensuse 13.1Opensuse Opensuse 13.2Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04
7.5
CVSSv2
CVE-2015-4488
Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox prior to 40.0, Firefox ESR 38.x prior to 38.2, and Firefox OS prior to 2.2 allows remote malicious users to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
Oracle Solaris 11.3Opensuse Opensuse 13.1Opensuse Opensuse 13.2Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Mozilla Firefox Esr 38.1.0Mozilla Firefox Os 2.1.0Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0Mozilla Firefox
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook