CVE-2015-2725: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to…

Unscored severity · published Jul 6, 2015

CVE-2015-2725

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to…

–

CVSS

EPSS

On KEV

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Exploitation

Is it being used?

Exploit prediction (EPSS)6.0% · higher than 93% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Firefox · Mozilla

31.0; 31.1.0; 31.1.1; 31.3.0; 31.5.1; 31.5.2; +3 more · source: NVD

Firefox Esr · Mozilla

31.1; 31.2; 31.3; 31.4; 31.5; 31.6.0; +1 more · source: NVD