VYPR
Unrated severityNVD Advisory· Published Jul 6, 2015· Updated May 6, 2026

CVE-2015-2739

CVE-2015-2739

Description

The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.

Affected products

28
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=38.1.0
    • cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:31.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:31.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:31.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:31.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
  • cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
    • cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox_esr:31.1:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:mozilla:firefox_esr:31.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox_esr:31.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox_esr:31.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox_esr:31.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox_esr:31.5:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox_esr:31.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox_esr:31.7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
    Range: <=38.0.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

20

News mentions

0

No linked articles in our index yet.