NVD

Id
24713  
Name
CVE-2015-2710  
Description
Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-05-14  
Modified Date
2017-01-02  
Seq
2015-2710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130140 24713 CVE-2015-2710 openSUSE-SU-2015:0892  View
130141 24713 CVE-2015-2710 SUSE-SU-2015:0960  View
130142 24713 CVE-2015-2710 SUSE-SU-2015:0978  View
130143 24713 CVE-2015-2710 openSUSE-SU-2015:1266  View
130144 24713 CVE-2015-2710 openSUSE-SU-2015:0934  View
130145 24713 CVE-2015-2710 RHSA-2015:0988  View
130146 24713 CVE-2015-2710 RHSA-2015:1012  View
130147 24713 CVE-2015-2710 DSA-3260  View
130148 24713 CVE-2015-2710 DSA-3264  View
130149 24713 CVE-2015-2710 http://www.mozilla.org/security/announce/2015/mfsa2015-48.html  View
130150 24713 CVE-2015-2710 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130151 24713 CVE-2015-2710 74611  View
130152 24713 CVE-2015-2710 USN-2602-1  View
130153 24713 CVE-2015-2710 USN-2603-1  View
130154 24713 CVE-2015-2710 https://bugzilla.mozilla.org/show_bug.cgi?id=1149542  View
130155 24713 CVE-2015-2710 GLSA-201605-06  View
130156 24713 CVE-2015-2710 https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7338 JVNDB-2015-002658 Mozilla Firefox および Thunderbird の SVGTextFrame クラスにおけるヒープベースのバッファオーバーフローの脆弱性 Mozilla Firefox および Thunderbird の SVGTextFrame クラスには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-2710 79935 CVE-2015-2710 24713 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002658.html 2015-05-12 2015-05-15 View