Skip to content
OpenAdvisories
Unscored RHSA-2015:1834 14 CVEs

Red Hat Security Advisory: firefox security update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client firefox 0:38.3.0-2.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client firefox-debuginfo 0:38.3.0-2.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox 0:38.3.0-2.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server firefox-debuginfo 0:38.3.0-2.el5_11
Red Hat · RHEL 6 enterprise_linux:6::client firefox 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client firefox-debuginfo 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode firefox-debuginfo 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server firefox 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server firefox-debuginfo 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox 0:38.3.0-2.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation firefox-debuginfo 0:38.3.0-2.el6_7
Red Hat · RHEL 7 enterprise_linux:7::client firefox 0:38.3.0-2.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client firefox-debuginfo 0:38.3.0-2.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox 0:38.3.0-2.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server firefox-debuginfo 0:38.3.0-2.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox 0:38.3.0-2.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation firefox-debuginfo 0:38.3.0-2.el7_1

Vulnerabilities 14

  • Unscored —
    CVE-2015-4500

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4506

    Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox …

    thunderbird firefox libvpx Debian Ubuntu
  • Unscored —
    CVE-2015-4509

    Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x befo…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4511

    Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4517

    NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4519

    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended ac…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4520

    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4521

    The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote at…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4522

    The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7174

    The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow re…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7175

    The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow re…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7176

    The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7177

    The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7180

    The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterpre…

    thunderbird firefox Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr38.3
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265186
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265192
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265617
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265784
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1834.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-4500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4500
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-96/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4506
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4506
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4506
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-101/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4509
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4509
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4509
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-106/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4511
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4511
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4511
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-105/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4517
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4517
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-112/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4519
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4519
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4519
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-110/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4520
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4520
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4520
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-111/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4521