CVE-2015-2710
Fixed in a distro release EPSS 4%
Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.
Products: mozilla thunderbird, mozilla firefox, mozilla firefox_esr, novell suse_linux_enterprise_software_development_kit, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | icedove | 31.7.0-1~deb7u1 |
| Debian 7 | iceweasel | 31.7.0esr-1~deb7u1 |
| Debian 8 | icedove | 31.7.0-1~deb8u1 |
| Debian 8 | iceweasel | 31.7.0esr-1~deb8u1 |
| Red Hat Enterprise Linux 5 | firefox | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:31.7.0-1.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:31.7.0-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:31.7.0-1.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:31.7.0-1.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:31.7.0-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:31.7.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:31.7.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:31.7.0-1.ael7b_1 |
| Red Hat rhel productivity 5 | thunderbird | 0:31.7.0-1.el5_11 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:31.7.0-1.el5_11 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.7.0esr-34.1 |
| Ubuntu 14.04 LTS | firefox | 38.0+build3-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | thunderbird | 1:31.7.0+build1-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |