SUSE-SU-2015:2336-1

    Dashboard / Vulnerabilities / SUSE-SU-2015:2336-1

    SUSE-SU-2015:2336-1

    Published: 21 Dec 2015Last Modified: 4 Feb 2026

    Summary: Security update for MozillaFirefox

    Details: MozillaFirefox was updated to version 38.5.0 ESR. It fixes the following security issues: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 Integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 Underflow through code inspection * MFSA 2015-146/CVE-2015-7213 Integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs

    References: https://www.suse.com/support/update/announcement/2015/suse-su-20152336-1/, https://bugzilla.suse.com/959277, https://www.suse.com/security/cve/CVE-2015-7201, https://www.suse.com/security/cve/CVE-2015-7202, https://www.suse.com/security/cve/CVE-2015-7205, https://www.suse.com/security/cve/CVE-2015-7210, https://www.suse.com/security/cve/CVE-2015-7212, https://www.suse.com/security/cve/CVE-2015-7213, https://www.suse.com/security/cve/CVE-2015-7214, https://www.suse.com/security/cve/CVE-2015-7222

    Affected packages

    Package

    Name: MozillaFirefox

    Purl: pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -38.5.0esr-28.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2015:2336-1 | CVE-DB