Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-2736

Fixed in a distro release EPSS 4%

The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.

Published 2015-07-06 · CVE record · OSV

Products: mozilla firefox, mozilla thunderbird, mozilla firefox_esr, oracle solaris, novell suse_linux_enterprise_software_development_kit, canonical ubuntu_linux, debian_linux, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server

Distro releases

ReleasePackageFixed in
Debian 7icedove31.8.0-1~deb7u1
Debian 7iceweasel31.8.0esr-1~deb7u1
Debian 8icedove31.8.0-1~deb8u1
Debian 8iceweasel31.8.0esr-1~deb8u1
Red Hat Enterprise Linux 5firefox0:38.1.0-1.el5_11
Red Hat Enterprise Linux 5firefox-debuginfo0:38.1.0-1.el5_11
Red Hat Enterprise Linux 5thunderbird0:31.8.0-1.el5_11
Red Hat Enterprise Linux 5thunderbird-debuginfo0:31.8.0-1.el5_11
Red Hat Enterprise Linux 6firefox0:38.1.0-1.el6_6
Red Hat Enterprise Linux 6firefox-debuginfo0:38.1.0-1.el6_6
Red Hat Enterprise Linux 6thunderbird0:31.8.0-1.el6_6
Red Hat Enterprise Linux 6thunderbird-debuginfo0:31.8.0-1.el6_6
Red Hat Enterprise Linux 7firefox0:38.1.0-1.el7_1
Red Hat Enterprise Linux 7firefox-debuginfo0:38.1.0-1.el7_1
Red Hat Enterprise Linux 7thunderbird0:31.8.0-1.ael7b_1
Red Hat Enterprise Linux 7thunderbird0:31.8.0-1.el7_1
Red Hat Enterprise Linux 7thunderbird-debuginfo0:31.8.0-1.ael7b_1
Red Hat Enterprise Linux 7thunderbird-debuginfo0:31.8.0-1.el7_1
Red Hat rhel productivity 5thunderbird0:31.8.0-1.el5_11
Red Hat rhel productivity 5thunderbird-debuginfo0:31.8.0-1.el5_11
SUSE Linux Enterprise Desktop 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Desktop 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Desktop 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Desktop 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Desktop 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Desktop 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Desktop 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Desktop 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Desktop 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Server 11 SP1-LTSSMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP1-LTSSMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP1-LTSSfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP1-LTSSmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP1-TERADATAMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP1-TERADATAMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP1-TERADATAfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP1-TERADATAmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP2-LTSSMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP2-LTSSMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP2-LTSSfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP2-LTSSmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAMozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAmozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP3-TERADATAmozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Server 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Server 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server for SAP Applications 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Server for SAP Applications 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Server for SAP Applications 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Software Development Kit 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Software Development Kit 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Software Development Kit 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Software Development Kit 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Software Development Kit 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Software Development Kit 12mozilla-nss3.19.2_CKBI_1.98-21.1
Ubuntu 14.04 LTSfirefox39.0+build5-0ubuntu0.14.04.1
Ubuntu 14.04 LTSthunderbird1:31.8.0+build1-0ubuntu0.14.04.1
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1