UBUNTU-CVE-2015-2740

Details

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.

Affected Packages

firefox

Ubuntu 14.04 LTS

Fixed in:

39.0+build5-0ubuntu0.14.04.1

thunderbird

Ubuntu 14.04 LTS

Fixed in:

1:31.8.0+build1-0ubuntu0.14.04.1

References

REPORT

http://www.mozilla.org/security/announce/2015/mfsa2015-66.html