UBUNTU-CVE-2015-2727

Details

Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions. NOTE: this vulnerability exists because of a CVE-2015-0821 regression.

Affected Packages

firefox

Ubuntu 14.04 LTS

Affected versions:

24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0+build1-0ubuntu128.0+build2-0ubuntu128.0+build2-0ubuntu228.0~b2+build1-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.1+12 more

Fixed in:

39.0+build5-0ubuntu0.14.04.1

References

REPORThttp://www.mozilla.org/security/announce/2015/mfsa2015-60.html REPORThttps://bugzilla.mozilla.org/show_bug.cgi?id=1163422 REPORThttps://ubuntu.com/security/CVE-2015-2727 REPORThttps://ubuntu.com/security/notices/USN-2656-1 REPORThttps://ubuntu.com/security/notices/USN-2656-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2015-2727 REPORThttps://www.mozilla.org/en-US/security/advisories/mfsa2015-60/

UBUNTU-CVE-2015-2727

Details

Affected Packages

References

Related

Ecosystems

Timeline