CVE-2015-2716
Fixed in a distro release EPSS 7%
Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.
Products: mozilla firefox, novell suse_linux_enterprise_software_development_kit, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, opensuse, mozilla thunderbird, oracle solaris, mozilla firefox_esr
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | icedove | 31.7.0-1~deb7u1 |
| Debian 7 | iceweasel | 31.7.0esr-1~deb7u1 |
| Debian 8 | icedove | 31.7.0-1~deb8u1 |
| Debian 8 | iceweasel | 31.7.0esr-1~deb8u1 |
| Red Hat Enterprise Linux 5 | firefox | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.0-4.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:31.7.0-1.el5_11 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:31.7.0-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.0-4.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:31.7.0-1.el6_6 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:31.7.0-1.el6_6 |
| Red Hat Enterprise Linux 7 | expat | 0:2.1.0-11.el7 |
| Red Hat Enterprise Linux 7 | expat-debuginfo | 0:2.1.0-11.el7 |
| Red Hat Enterprise Linux 7 | expat-devel | 0:2.1.0-11.el7 |
| Red Hat Enterprise Linux 7 | expat-static | 0:2.1.0-11.el7 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.0-3.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:31.7.0-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:31.7.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:31.7.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:31.7.0-1.ael7b_1 |
| Red Hat rhel eus 7.7 | expat | 0:2.1.0-11.el7_7 |
| Red Hat rhel eus 7.7 | expat-debuginfo | 0:2.1.0-11.el7_7 |
| Red Hat rhel eus 7.7 | expat-devel | 0:2.1.0-11.el7_7 |
| Red Hat rhel eus 7.7 | expat-static | 0:2.1.0-11.el7_7 |
| Red Hat rhel productivity 5 | thunderbird | 0:31.7.0-1.el5_11 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:31.7.0-1.el5_11 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.7.0esr-34.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.7.0esr-34.1 |
| Ubuntu 14.04 LTS | firefox | 38.0+build3-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | thunderbird | 1:31.7.0+build1-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |