Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2015-4473

CVE-2015-4473

UNKNOWN

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40

Published Aug 16, 2015

Modified 1 years ago

Details

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html

http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html

http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html

http://rhn.redhat.com/errata/RHSA-2015-1586.html

http://rhn.redhat.com/errata/RHSA-2015-1682.html

http://www.debian.org/security/2015/dsa-3333

http://www.debian.org/security/2015/dsa-3410

http://www.mozilla.org/security/announce/2015/mfsa2015-79.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.securitytracker.com/id/1033247

http://www.securitytracker.com/id/1033372

http://www.ubuntu.com/usn/USN-2702-1

http://www.ubuntu.com/usn/USN-2702-2

http://www.ubuntu.com/usn/USN-2702-3

http://www.ubuntu.com/usn/USN-2712-1

https://bugzilla.mozilla.org/show_bug.cgi?id=1146213

https://bugzilla.mozilla.org/show_bug.cgi?id=1178890

https://bugzilla.mozilla.org/show_bug.cgi?id=1182711

https://security.gentoo.org/glsa/201605-06

https://www.cve.org/CVERecord?id=CVE-2015-4473

CVSS Analysis

CVSS v2.0

10.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

10/AV:N/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedAug 16, 2015

ModifiedAug 6, 2024

CVE-2015-4473 | Mondoo Vulnerability Intelligence