Skip to content
OpenAdvisories
Unscored RHSA-2015:1586 14 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:38.2.0-4.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:38.2.0-4.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:38.2.0-4.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:38.2.0-4.el5_11
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:38.2.0-4.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:38.2.0-4.el6_7
Red Hat · RHEL 7 enterprise_linux:7::client firefox 0:38.2.0-4.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client firefox-debuginfo 0:38.2.0-4.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox 0:38.2.0-4.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox-debuginfo 0:38.2.0-4.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox 0:38.2.0-4.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox-debuginfo 0:38.2.0-4.el7_1

Vulnerabilities 14

  • Unscored —
    CVE-2015-4473

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4475

    The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4478

    Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScr…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4479

    Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remo…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4480

    Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4484

    The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and…

    firefox Ubuntu
  • Unscored —
    CVE-2015-4485

    Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox …

    firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2015-4486

    The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote…

    firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2015-4487

    The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS bef…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4488

    Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4489

    The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might a…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4491

    Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla F…

    thunderbird firefox gdk-pixbuf gdk-pixbuf Debian Ubuntu
  • Unscored —
    CVE-2015-4492

    Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR …

    firefox Ubuntu
  • Unscored —
    CVE-2015-4493

    Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox be…

    firefox Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr38.2
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252282
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252285
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252289
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252292
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252293
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252295
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1586.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-4473
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4473
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4473
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-79.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4475
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4475
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4475
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-80.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4478
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4478
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-82.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4479
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4479
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4479
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-83.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4480
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4480
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4480
  • report
    https://access.redhat.com/security/cve/CVE-2015-4484
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4484
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4484
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-87.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-4485
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4485
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4485
  • article
    https://www.mozilla.org/security/announce/2015/mfsa2015-89.html