Skip to content
OpenAdvisories
Unscored DSA-3422-1 7 CVEs

iceweasel - security update

Published Dec 16, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 iceweasel 38.5.0esr-1~deb7u2
Debian · 8 iceweasel 38.5.0esr-1~deb8u2

Vulnerabilities 7

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 3…

  • Unscored —

    Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x …

  • Unscored —

    Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to…

  • Unscored —

    Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.…

  • Unscored —

    Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefo…

  • Unscored —
    CVE-2015-7214 Public exploit

    Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy vi…

  • Unscored —

    Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 an…