Published: 05/11/2015 Updated: 07/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Mozilla Firefox prior to 42.0 and Firefox ESR 38.x prior to 38.4, when a Java plugin is enabled, allow remote malicious users to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
mozilla firefox esr 38.0.5
mozilla firefox esr 38.1.0
mozilla firefox esr 38.2.1
mozilla firefox esr 38.3.0
mozilla firefox esr 38.0
mozilla firefox esr 38.0.1
mozilla firefox esr 38.1.1
mozilla firefox esr 38.2.0

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, integer overflows, buffer overflows and other implementation errors may lead to the execution of arbitrary code, information disclosure or denial of service For the oldstable distribution (wheezy), these proble ...

Mozilla Foundation Security Advisory 2015-130 JavaScript garbage collection crash with Java applet Announced November 3, 2015 Reporter Vytautas Staraitis Impact High Products Firefox, Firefox ESR Fixed in ...

Mozilla Firefox before 420 and Firefox ESR 38x before 384, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper ...

CWE-17 http://www.mozilla.org/security/announce/2015/mfsa2015-130.html https://bugzilla.mozilla.org/show_bug.cgi?id=1140616 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.securityfocus.com/bid/77411 http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.html https://security.gentoo.org/glsa/201512-10 http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html http://www.debian.org/security/2015/dsa-3393 http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.html http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.html http://www.ubuntu.com/usn/USN-2785-1 http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.html http://rhn.redhat.com/errata/RHSA-2015-1982.html http://www.securitytracker.com/id/1034069 https://usn.ubuntu.com/2785-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-7196

CVE-2015-7196

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect