---
title: "Mozilla Firefox Multiple Vulnerabilities-01 May15 (Mac OS X)"
url: https://securityorb.com/mozilla-firefox-multiple-vulnerabilities-01-may15-mac-os-x/
type: post
date: 2015-06-10
modified: 2015-06-10
markdown_url: https://securityorb.com/mozilla-firefox-multiple-vulnerabilities-01-may15-mac-os-x.md
author: "Kellep Charles"
---

# Mozilla Firefox Multiple Vulnerabilities-01 May15 (Mac OS X)

Vulnerability
Severity

Host
Location
Actions

[Mozilla Firefox Multiple Vulnerabilities-01 May15 (Mac OS X)](https://localhost:9392/omp?cmd=get_result&result_id=5fd446c3-73be-4f10-b884-03a51420f0e1&apply_overrides=&task_id=&name=&report_id=&filter=&filt_id=&overrides=&autofp=&report_result_id=5fd446c3-73be-4f10-b884-03a51420f0e1&token=7241b55a-5ca8-4795-92ff-86849e3cca05)

7.5 (High)

192.168.1.106
general/tcp

[![Add Note](https://localhost:9392/img/new_note.png)](https://localhost:9392/omp?cmd=new_note&next=get_result&result_id=5fd446c3-73be-4f10-b884-03a51420f0e1&oid=1.3.6.1.4.1.25623.1.0.805626&task_id=7f3c5911-b0d6-4439-be92-946d9d15fc8d&name=Mac_Air_Scan&severity=7.5&port=general/tcp&hosts=192.168.1.106&report_id=842c505d-55b7-450e-92d0-69593ca94773&filter=sort-reverse%3Dseverity%20result_hosts_only%3D1%20min_cvss_base%3D%20levels%3Dhmlg%20autofp%3D0%20notes%3D1%20overrides%3D1%20first%3D1%20rows%3D100%20delta_states%3Dgn&filt_id=&apply_overrides=1&autofp=0&report_result_id=5fd446c3-73be-4f10-b884-03a51420f0e1&details=&token=7241b55a-5ca8-4795-92ff-86849e3cca05)

[![Add Override](https://localhost:9392/img/new_override.png)](https://localhost:9392/omp?cmd=new_override&next=get_result&result_id=5fd446c3-73be-4f10-b884-03a51420f0e1&oid=1.3.6.1.4.1.25623.1.0.805626&task_id=7f3c5911-b0d6-4439-be92-946d9d15fc8d&name=Mac_Air_Scan&severity=7.5&port=general/tcp&hosts=192.168.1.106&report_id=842c505d-55b7-450e-92d0-69593ca94773&filter=sort-reverse%3Dseverity%20result_hosts_only%3D1%20min_cvss_base%3D%20levels%3Dhmlg%20autofp%3D0%20notes%3D1%20overrides%3D1%20first%3D1%20rows%3D100%20delta_states%3Dgn&filt_id=&apply_overrides=1&autofp=0&report_result_id=5fd446c3-73be-4f10-b884-03a51420f0e1&details=&token=7241b55a-5ca8-4795-92ff-86849e3cca05)

**Summary**This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities.

**Vulnerability Detection Result**

```
Installed version: 35.0.1
Fixed version: 38.0
```

**Impact**Successful exploitation will allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code, bypass security restrictions, bypass origin restrictions, gain knowledge of sensitive information, run custom code, cause the server to crash and gain privileged access.

Impact Level: System/Application

**Solution**Upgrade to Mozilla Firefox version 38.0 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html

**Vulnerability Insight**Multiple flaws are due to: - Flaw in WebChannel.jsm module in Mozilla Firefox. - Integer overflow in libstagefright in Mozilla Firefox. - Buffer overflow in the XML parser in Mozilla Firefox. - Race condition in the 'nsThreadManager::RegisterCurrentThread' function in Mozilla Firefox. - Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox. - Flaw in Mozilla Firefox so that does not recognize a referrer policy delivered by a referrer META element. - Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox. - Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox. - Flaw in asm.js implementation in Mozilla Firefox. - Flaw in GStreamer in Mozilla Firefox.

**Vulnerability Detection Method**Get the installed version with the help of detect NVT and check the version is vulnerable or not.

Details: [Mozilla Firefox Multiple Vulnerabilities-01 May15 (Mac OS X) (OID: 1.3.6.1.4.1.25623.1.0.805626)](https://localhost:9392/omp?cmd=get_nvts&oid=1.3.6.1.4.1.25623.1.0.805626&token=7241b55a-5ca8-4795-92ff-86849e3cca05)

Version used: $Revision: 1271 $

**References**

CVE:
[CVE-2015-2708](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2708&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2709](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2709&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2710](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2710&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2711](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2711&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2712](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2712&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2713](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2713&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2715](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2715&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2716](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2716&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2717](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2717&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-2718](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-2718&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [CVE-2015-0797](https://localhost:9392/omp?cmd=get_info&info_type=cve&info_name=CVE-2015-0797&details=1&filter=&filt_id=&token=7241b55a-5ca8-4795-92ff-86849e3cca05)

BID:
74615, 74611

CERT:
[DFN-CERT-2015-0692](https://localhost:9392/omp?cmd=get_info&info_type=dfn_cert_adv&info_name=DFN-CERT-2015-0692&details=1&filter=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [DFN-CERT-2015-0683](https://localhost:9392/omp?cmd=get_info&info_type=dfn_cert_adv&info_name=DFN-CERT-2015-0683&details=1&filter=&token=7241b55a-5ca8-4795-92ff-86849e3cca05), [DFN-CERT-2015-0566](https://localhost:9392/omp?cmd=get_info&info_type=dfn_cert_adv&info_name=DFN-CERT-2015-0566&details=1&filter=&token=7241b55a-5ca8-4795-92ff-86849e3cca05)

Other:
http://osvdb.org/122021

http://osvdb.org/122022

http://osvdb.org/122038

https://www.mozilla.org/en-US/security/advisories/mfsa2015-46