Unscored severity · published Jul 6, 2015
CVE-2015-2724
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firefox · Mozilla
31.0; 31.1.0; 31.1.1; 31.3.0; 31.5.1; 31.5.2; +3 more · source: NVD
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
FE
Firefox Esr · Mozilla
31.1; 31.2; 31.3; 31.4; 31.5; 31.6.0; +1 more · source: NVD
SO
Solaris · Oracle
11.3 · source: NVD
TH
Thunderbird · Mozilla
through 38.0.1 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 14.10; 15.04 · source: NVD