CVE-2015-2713
Fixed in a distro release EPSS 4%
Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.
Products: novell suse_linux_enterprise_software_development_kit, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, opensuse, mozilla firefox, mozilla thunderbird, mozilla firefox_esr
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | icedove | 31.7.0-1~deb7u1 |
| Debian 7 | iceweasel | 31.7.0esr-1~deb7u1 |
| Debian 8 | icedove | 31.7.0-1~deb8u1 |
| Debian 8 | iceweasel | 31.7.0esr-1~deb8u1 |
| Red Hat Enterprise Linux 5 | firefox | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:31.7.0-1.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:31.7.0-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:31.7.0-1.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:31.7.0-1.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:31.7.0-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:31.7.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:31.7.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:31.7.0-1.ael7b_1 |
| Red Hat rhel productivity 5 | thunderbird | 0:31.7.0-1.el5_11 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:31.7.0-1.el5_11 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.7.0esr-34.1 |
| Ubuntu 14.04 LTS | firefox | 38.0+build3-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | thunderbird | 1:31.7.0+build1-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |