Mozilla Firefox Multiple Vulnerabilities

Last Update Date: 12 Aug 2015 11:38 Release Date: 12 Aug 2015 3086 Views

RISK: High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities have been identified in Firefox, Firefox ESR, and Firefox OS. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Impact

Cross-Site Scripting
Remote Code Execution
Security Restriction Bypass
Information Disclosure

System / Technologies affected

Firefox versions prior to 40
Firefox ESR versions prior to 38.2
Firefox OS versions prior to 2.2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (Firefox 40, Firefox ESR 38.2, Firefox OS 2.2).

Vulnerability Identifier

No CVE information is available

Source

US-CERT