Every CVE Search/ Get API key

CVE-2015-4473

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...

10.0 HighFix available

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Exploit likelihood

6.69%Down 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
CVE-2015-4473
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
CVE-2015-4473
Updated
2026-11-02
EUVDEUVD-2015-4493 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
EUVD-2015-4493
Updated
2026-11-03
GitHub AdvisoriesGHSA-49v6-8hgf-2jxx No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
GHSA-49v6-8hgf-2jxx
Weakness
CWE-119
Updated
2026-11-02
OSVMGASA-2015-0312 No score

Updated firefox packages fixes security vulnerabilities

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2015-4473, CVE-2015-4475, CVE-2015-4478, CVE-2015-4479, CVE-2015-4480, CVE-2015-4493, CVE-2015-4484, CVE-2015-4491, CVE-2015-4485, CVE-2015-4486, CVE-2015-4487, CVE-2015-4488, CVE-2015-4489, CVE-2015-4492)

Record
MGASA-2015-0312
Updated
2026-11-02
OSVMGASA-2015-0330 No score

Updated thunderbird packages fix security vulnerabilities

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2015-4473, CVE-2015-4491, CVE-2015-4487, CVE-2015-4488, CVE-2015-4489).

Record
MGASA-2015-0330
Updated
2026-11-02
Show 9 moreShow less
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10230-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2015:1449-1 No score

Security update for MozillaFirefox, mozilla-nss

Mozilla Firefox is being updated to the current Firefox 38ESR branch (specifically the 38.2.0ESR release).

Security issues fixed:

  • MFSA 2015-78 / CVE-2015-4495: Same origin violation and local file stealing via PDF reader
  • MFSA 2015-79 / CVE-2015-4473/CVE-2015-4474: Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)
  • MFSA 2015-80 / CVE-2015-4475: Out-of-bounds read with malformed MP3 file
  • MFSA 2015-82 / CVE-2015-4478: Redefinition of non-configurable JavaScript object properties
  • MFSA 2015-83 / CVE-2015-4479: Overflow issues in libstagefright
  • MFSA 2015-87 / CVE-2015-4484: Crash when using shared memory in JavaScript
  • MFSA 2015-88 / CVE-2015-4491: Heap overflow in gdk-pixbuf when scaling bitmap images
  • MFSA 2015-89 / CVE-2015-4485/CVE-2015-4486: Buffer overflows on Libvpx when decoding WebM video
  • MFSA 2015-90 / CVE-2015-4487/CVE-2015-4488/CVE-2015-4489: Vulnerabilities found through code inspection
  • MFSA 2015-92 / CVE-2015-4492: Use-after-free in XMLHttpRequest with shared workers

The following vulnerabilities were fixed in ESR31 and are also included here:

  • CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979).
  • CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979).
  • CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979).
  • CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979).
  • CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979).
  • CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979).
  • CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935033).
  • CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979).

This update also contains a lot of feature improvements and bug fixes from 31ESR to 38ESR.

Also the Mozilla NSS library switched its CKBI API from 1.98 to 2.4, which is what Firefox 38ESR uses.

Mozilla Firefox and mozilla-nss were updated to fix 17 security issues.

Record
SUSE-SU-2015:1449-1
Updated
2026-11-02
OSVSUSE-SU-2015:1476-1 No score

Security update for MozillaFirefox, mozilla-nss

Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities.

  • Firefox was updated to 38.2.1 ESR (bsc#943608)

    • MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during restyling
    • MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on notification bypass through data URLs

  • Firefox was updated to 38.2.0 ESR (bsc#940806)

    • MFSA 2015-78/CVE-2015-4495 (bmo#1178058, bmo#1179262) Same origin violation and local file stealing via PDF reader
    • MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 (bmo#1143130, bmo#1161719, bmo#1177501, bmo#1181204, bmo#1184068, bmo#1188590, bmo#1146213, bmo#1178890, bmo#1182711) Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)
    • MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file
    • MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties
    • MFSA 2015-83/CVE-2015-4479 (bmo#1185115, bmo#1144107, bmo#1170344, bmo#1186718) Overflow issues in libstagefright
    • MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript
    • MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images
    • MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video
    • MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 (bmo#1176270, bmo#1182723, bmo#1171603) Vulnerabilities found through code inspection
    • MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers

Mozilla NSS switched the CKBI ABI from 1.98 to 2.4, which is what Firefox 38ESR uses.

Record
SUSE-SU-2015:1476-1
Updated
2026-11-02
OSVSUSE-SU-2015:1528-1 No score

Security update for MozillaFirefox, mozilla-nss

Mozilla Firefox is being updated to the current Firefox 38ESR branch (specifically the 38.2.0ESR release).

Security issues fixed:

  • MFSA 2015-78 / CVE-2015-4495: Same origin violation and local file stealing via PDF reader
  • MFSA 2015-79 / CVE-2015-4473/CVE-2015-4474: Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)
  • MFSA 2015-80 / CVE-2015-4475: Out-of-bounds read with malformed MP3 file
  • MFSA 2015-82 / CVE-2015-4478: Redefinition of non-configurable JavaScript object properties
  • MFSA 2015-83 / CVE-2015-4479: Overflow issues in libstagefright
  • MFSA 2015-87 / CVE-2015-4484: Crash when using shared memory in JavaScript
  • MFSA 2015-88 / CVE-2015-4491: Heap overflow in gdk-pixbuf when scaling bitmap images
  • MFSA 2015-89 / CVE-2015-4485/CVE-2015-4486: Buffer overflows on Libvpx when decoding WebM video
  • MFSA 2015-90 / CVE-2015-4487/CVE-2015-4488/CVE-2015-4489: Vulnerabilities found through code inspection
  • MFSA 2015-92 / CVE-2015-4492: Use-after-free in XMLHttpRequest with shared workers

This update also contains a lot of feature improvements and bug fixes from 31ESR to 38ESR.

Also the Mozilla NSS library switched its CKBI API from 1.98 to 2.4, which is what Firefox 38ESR uses.

Record
SUSE-SU-2015:1528-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-4473 No score

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Record
UBUNTU-CVE-2015-4473
Updated
2026-11-02
OSVUSN-2702-1 No score

firefox vulnerabilities

Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley, Chris Coulson, and Eric Rahm discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-4473, CVE-2015-4474)

Aki Helin discovered an out-of-bounds read when playing malformed MP3 content in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to obtain sensitive information, cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-4475)

A use-after-free was discovered during MediaStream playback in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2015-4477)

André Bargull discovered that non-configurable properties on javascript objects could be redefined when parsing JSON. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2015-4478)

Multiple integer overflows were discovered in libstagefright. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-4479, CVE-2015-4480, CVE-2015-4493)

Jukka Jylänki discovered a crash that occurs because javascript does not properly gate access to Atomics or SharedArrayBuffers in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service. (CVE-2015-4484)

Abhishek Arya discovered 2 buffer overflows in libvpx when decoding malformed WebM content in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-4485, CVE-2015-4486)

Ronald Crane reported 3 security issues. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these, in combination with another security vulnerability, to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

Christoph Kerschbaumer discovered an issue with Mozilla's implementation of Content Security Policy (CSP), which could allow for a more permissive usage in some cirucumstances. An attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2015-4490)

Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2015-4491)

Looben Yang discovered a use-after-free when using XMLHttpRequest with shared workers in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2015-4492)

Record
USN-2702-1
Updated
2026-11-02
OSVUSN-2712-1 No score

thunderbird vulnerabilities

Gary Kwong, Christian Holler, and Byron Campen discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges ofthe user invoking Thunderbird. (CVE-2015-4473)

Ronald Crane reported 3 security issues. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these, in combination with another security vulnerability, to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2015-4491)

Record
USN-2712-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iceweasel
Debian:7
 before 38.2.0esr-1~deb7u1, plus listed versions
10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1
Show 45 moreShow less
11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.10esr-1~deb7u117.0.5esr-117.0.6esr-117.0.6esr-1~deb7u117.0.7esr-117.0.7esr-1~deb7u117.0.7esr-217.0.8esr-117.0.8esr-1~deb7u117.0.8esr-217.0.8esr-2~deb7u117.0.9esr-1~deb7u118.0-118.0.1-118.0.2-1
38.2.0esr-1~deb7u1
iceweasel
Debian:8
 before 38.2.0esr-1~deb8u1, plus listed versions
31.6.0esr-131.7.0esr-1~deb7u131.7.0esr-1~deb8u131.8.0esr-1~deb7u131.8.0esr-1~deb8u1
Show 32 moreShow less
32.0-132.0.3-132.0~b1-132.0~b3-132.0~b5-133.0-133.0-233.1-134.0-135.0-135.0.1-136.0-136.0-236.0.1-136.0.1-236.0.4-137.0-137.0.1-137.0.2-138.0-138.0-238.0.1-138.0.1-238.0.1-338.0.1-438.0.1-538.1.0esr-138.1.0esr-238.1.0esr-338.1.1esr-138.1.1esr-1~deb9u138.2.0esr-1~deb7u1
38.2.0esr-1~deb8u1
icedove
Debian:7
 before 38.4.0-1~deb7u1, plus listed versions
10.0.12-111.0-116.0.2-117.0-117.0.10-1
Show 45 moreShow less
17.0.10-1+powerpcspe117.0.10-1+powerpcspe217.0.10-1~deb7u117.0.2-117.0.4-117.0.5-117.0.5-217.0.7-117.0.7-1~deb7u117.0.8-117.0.8-1~deb7u117.0.9-117.0.9-1~deb7u117.0.9-224.0-124.0~b3-224.1.1-124.2.0-124.2.0-1+alpha24.2.0-1+powerpcspe124.3.0-124.3.0-224.4.0-124.4.0-1~deb7u124.5.0-124.5.0-1~deb7u124.5.0-224.6.0-1~deb7u124.7.0-1~deb7u124.8.0-1~deb7u124.8.1-1~deb7u130.0~b1-131.0-131.0-231.0-331.0~b1-231.0~b2-131.1.2-131.2.0-131.2.0-1~deb7u131.3.0-131.3.0-1+powerpcspe131.3.0-1~deb7u131.4.0-131.4.0-1~deb7u1
38.4.0-1~deb7u1
icedove
Debian:8
 before 38.4.0-1~deb8u1, plus listed versions
31.6.0-131.7.0-131.7.0-1~deb7u131.7.0-1~deb8u131.8.0-1~deb7u1
Show 20 moreShow less
31.8.0-1~deb8u131.8.0-1~deb8u1+kbsd1132.0~b1-133.0~b1-134.0~b1-134.0~b1-236.0~b1-136.0~b1-238.0.1-138.0~b2-138.0~b5-138.1.0-138.2.0-138.2.0-1~stretch38.2.0-238.3.0-138.3.0-1~deb7u138.3.0-1~deb8u138.3.0-238.4.0-1~deb7u1
38.4.0-1~deb8u1
rootcerts
Mageia:4
 before 20150709.00-1.mga4
20150709.00-1.mga4
nss
Mageia:4
 before 3.19.3-1.mga4
3.19.3-1.mga4
firefox
Mageia:4
 before 38.2.0-1.mga4
38.2.0-1.mga4
firefox-l10n
Mageia:4
 before 38.2.0-1.mga4
38.2.0-1.mga4
rootcerts
Mageia:5
 before 20150709.00-1.mga5
20150709.00-1.mga5
nss
Mageia:5
 before 3.19.3-1.mga5
3.19.3-1.mga5
Show 93 moreShow less
Affected packages
PackageAffectedFixed
firefox
Mageia:5
 before 38.2.0-1.mga5
38.2.0-1.mga5
firefox-l10n
Mageia:5
 before 38.2.0-1.mga5
38.2.0-1.mga5
thunderbird
Mageia:4
 before 38.2.0-1.mga4
38.2.0-1.mga4
thunderbird-l10n
Mageia:4
 before 38.2.0-1.mga4
38.2.0-1.mga4
thunderbird
Mageia:5
 before 38.2.0-1.mga5
38.2.0-1.mga5
thunderbird-l10n
Mageia:5
 before 38.2.0-1.mga5
38.2.0-1.mga5
firefox
Red Hat:enterprise_linux:5::client
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
firefox-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
firefox
Red Hat:enterprise_linux:5::server
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
firefox-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
firefox
Red Hat:enterprise_linux:6::client
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox
Red Hat:enterprise_linux:6::server
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
firefox
Red Hat:enterprise_linux:7::client
 before 0:38.2.0-4.el7_1
0:38.2.0-4.el7_1
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:38.2.0-4.el7_1
0:38.2.0-4.el7_1
firefox
Red Hat:enterprise_linux:7::server
 before 0:38.2.0-4.el7_1
0:38.2.0-4.el7_1
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:38.2.0-4.el7_1
0:38.2.0-4.el7_1
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:38.2.0-4.el7_1
0:38.2.0-4.el7_1
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:38.2.0-4.el7_1
0:38.2.0-4.el7_1
thunderbird
Red Hat:enterprise_linux:5::client
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
thunderbird
Red Hat:rhel_productivity:5
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
thunderbird-debuginfo
Red Hat:rhel_productivity:5
 before 0:38.2.0-4.el5_11
0:38.2.0-4.el5_11
thunderbird
Red Hat:enterprise_linux:6::client
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
thunderbird
Red Hat:enterprise_linux:6::workstation
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:38.2.0-4.el6_7
0:38.2.0-4.el6_7
thunderbird
Red Hat:enterprise_linux:7::client
 before 0:38.2.0-1.el7_1
0:38.2.0-1.el7_1
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:38.2.0-1.el7_1
0:38.2.0-1.el7_1
thunderbird
Red Hat:enterprise_linux:7::server
 before 0:38.2.0-1.ael7b_1
0:38.2.0-1.ael7b_1
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:38.2.0-1.ael7b_1
0:38.2.0-1.ael7b_1
thunderbird
Red Hat:enterprise_linux:7::workstation
 before 0:38.2.0-1.el7_1
0:38.2.0-1.el7_1
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:38.2.0-1.el7_1
0:38.2.0-1.el7_1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP1-LTSS
 before 38.2.0esr-10.1
38.2.0esr-10.1
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP1-LTSS
 before 31.0-0.5.7.11
31.0-0.5.7.11
firefox-gcc47
SUSE:Linux Enterprise Server 11 SP1-LTSS
 before 4.7.2_20130108-0.37.2
4.7.2_20130108-0.37.2
mozilla-nss
SUSE:Linux Enterprise Server 11 SP1-LTSS
 before 3.19.2.0-0.7.1
3.19.2.0-0.7.1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP1-TERADATA
 before 38.2.0esr-10.1
38.2.0esr-10.1
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP1-TERADATA
 before 31.0-0.5.7.11
31.0-0.5.7.11
firefox-gcc47
SUSE:Linux Enterprise Server 11 SP1-TERADATA
 before 4.7.2_20130108-0.37.2
4.7.2_20130108-0.37.2
mozilla-nss
SUSE:Linux Enterprise Server 11 SP1-TERADATA
 before 3.19.2.0-0.7.1
3.19.2.0-0.7.1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP2-LTSS
 before 38.2.0esr-10.1
38.2.0esr-10.1
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP2-LTSS
 before 31.0-0.5.7.11
31.0-0.5.7.11
firefox-gcc47
SUSE:Linux Enterprise Server 11 SP2-LTSS
 before 4.7.2_20130108-0.37.2
4.7.2_20130108-0.37.2
mozilla-nss
SUSE:Linux Enterprise Server 11 SP2-LTSS
 before 3.19.2.0-0.7.1
3.19.2.0-0.7.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12
 before 38.2.1esr-45.1
38.2.1esr-45.1
MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Desktop 12
 before 31.0-14.1
31.0-14.1
mozilla-nss
SUSE:Linux Enterprise Desktop 12
 before 3.19.2.0-26.2
3.19.2.0-26.2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12
 before 38.2.1esr-45.1
38.2.1esr-45.1
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 12
 before 3.19.2.0-26.2
3.19.2.0-26.2
MozillaFirefox
SUSE:Linux Enterprise Server 12
 before 38.2.1esr-45.1
38.2.1esr-45.1
MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server 12
 before 31.0-14.1
31.0-14.1
mozilla-nss
SUSE:Linux Enterprise Server 12
 before 3.19.2.0-26.2
3.19.2.0-26.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12
 before 38.2.1esr-45.1
38.2.1esr-45.1
MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server for SAP Applications 12
 before 31.0-14.1
31.0-14.1
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12
 before 3.19.2.0-26.2
3.19.2.0-26.2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 11 SP3
 before 38.2.1esr-19.3
38.2.1esr-19.3
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 11 SP3
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 38.2.1esr-19.3
38.2.1esr-19.3
mozilla-nss
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 11 SP3
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Desktop 11 SP3
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Desktop 11 SP3
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 11 SP4
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Desktop 11 SP4
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Desktop 11 SP4
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP3
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Server 11 SP3
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server 11 SP4
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Server 11 SP4
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 38.2.1esr-19.3
38.2.1esr-19.3
MozillaFirefox-branding-SLED
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 31.0-0.12.51
31.0-0.12.51
mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.19.2.0-0.16.1
3.19.2.0-0.16.1
firefox
Ubuntu:14.04:LTS
 before 40.0+build4-0ubuntu0.14.04.1, plus listed versions
24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1
Show 19 moreShow less
28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.133.0+build2-0ubuntu0.14.04.134.0+build2-0ubuntu0.14.04.135.0+build3-0ubuntu0.14.04.235.0.1+build1-0ubuntu0.14.04.136.0+build2-0ubuntu0.14.04.436.0.1+build2-0ubuntu0.14.04.136.0.4+build1-0ubuntu0.14.04.137.0+build2-0ubuntu0.14.04.137.0.1+build1-0ubuntu0.14.04.137.0.2+build1-0ubuntu0.14.04.138.0+build3-0ubuntu0.14.04.139.0+build5-0ubuntu0.14.04.139.0.3+build2-0ubuntu0.14.04.1
40.0+build4-0ubuntu0.14.04.1
thunderbird
Ubuntu:14.04:LTS
 before 1:38.2.0+build1-0ubuntu0.14.04.1, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1
Show 13 moreShow less
1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.1
1:38.2.0+build1-0ubuntu0.14.04.1
MozillaFirefox
openSUSE:Tumbleweed
 before 50.1.0-1.1
50.1.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
 before 45.5.1-1.1
45.5.1-1.1
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-4473 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published August 11, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.69%, the 93rd percentile. Fixed in iceweasel 38.2.0esr-1~deb7u1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 136 versions and 2,013 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open