MozillaFirefox was updated to Firefox 41.0 (bnc#947003)

Security issues fixed :

  - MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous     memory safety hazards

  - MFSA 2015-97/CVE-2015-4503 (bmo#994337) Memory leak in     mozTCPSocket to servers

  - MFSA 2015-98/CVE-2015-4504 (bmo#1132467) Out of bounds     read in QCMS library with ICC V4 profile attributes

  - MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)     Site attribute spoofing on Android by pasting URL with     unknown scheme

  - MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)     Arbitrary file manipulation by local user through     Mozilla updater

  - MFSA 2015-101/CVE-2015-4506 (bmo#1192226) Buffer     overflow in libvpx while parsing vp9 format video

  - MFSA 2015-102/CVE-2015-4507 (bmo#1192401) Crash when     using debugger with SavedStacks in JavaScript

  - MFSA 2015-103/CVE-2015-4508 (bmo#1195976) URL spoofing     in reader mode

  - MFSA 2015-104/CVE-2015-4510 (bmo#1200004) Use-after-free     with shared workers and IndexedDB

  - MFSA 2015-105/CVE-2015-4511 (bmo#1200148) Buffer     overflow while decoding WebM video

  - MFSA 2015-106/CVE-2015-4509 (bmo#1198435) Use-after-free     while manipulating HTML media content

  - MFSA 2015-107/CVE-2015-4512 (bmo#1170390) Out-of-bounds     read during 2D canvas display on Linux 16-bit color     depth systems

  - MFSA 2015-108/CVE-2015-4502 (bmo#1105045) Scripted     proxies can access inner window

  - MFSA 2015-109/CVE-2015-4516 (bmo#904886) JavaScript     immutable property enforcement can be bypassed

  - MFSA 2015-110/CVE-2015-4519 (bmo#1189814) Dragging and     dropping images exposes final URL after redirects

  - MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)     Errors in the handling of CORS preflight request headers

  - MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/     CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/     CVE-2015-7180 Vulnerabilities found through code     inspection

  - MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,     bmo#1190526) (Windows only) Memory safety errors in     libGLES in the ANGLE graphics library

  - MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)     Information disclosure via the High Resolution Time API

MozillaThunderbird was updated to fix 17 security issues.

These security issues were fixed :

  - CVE-2015-4509: Use-after-free vulnerability in the     HTMLVideoElement interface in Mozilla Firefox before     41.0 and Firefox ESR 38.x before 38.3 allowed remote     attackers to execute arbitrary code via crafted     JavaScript code that modifies the URI table of a media     element, aka ZDI-CAN-3176 (bsc#947003).

  - CVE-2015-4520: Mozilla Firefox before 41.0 and Firefox     ESR 38.x before 38.3 allowed remote attackers to bypass     CORS preflight protection mechanisms by leveraging (1)     duplicate cache-key generation or (2) retrieval of a     value from an incorrect HTTP Access-Control-* response     header (bsc#947003).

  - CVE-2015-4521: The ConvertDialogOptions function in     Mozilla Firefox before 41.0 and Firefox ESR 38.x before     38.3 might allowed remote attackers to cause a denial of     service (memory corruption and application crash) or     possibly have unspecified other impact via unknown     vectors (bsc#947003).

  - CVE-2015-4522: The nsUnicodeToUTF8::GetMaxLength     function in Mozilla Firefox before 41.0 and Firefox ESR     38.x before 38.3 might allowed remote attackers to cause     a denial of service (memory corruption and application     crash) or possibly have unspecified other impact via     unknown vectors, related to an 'overflow (bsc#947003).

  - CVE-2015-4500: Multiple unspecified vulnerabilities in     the browser engine in Mozilla Firefox before 41.0 and     Firefox ESR 38.x before 38.3 allowed remote attackers to     cause a denial of service (memory corruption and     application crash) or possibly execute arbitrary code     via unknown vectors (bsc#947003).

  - CVE-2015-4511: Heap-based buffer overflow in the     nestegg_track_codec_data function in Mozilla Firefox     before 41.0 and Firefox ESR 38.x before 38.3 allowed     remote attackers to execute arbitrary code via a crafted     header in a WebM video (bsc#947003).

  - CVE-2015-7178: The ProgramBinary::linkAttributes     function in libGLES in ANGLE, as used in Mozilla Firefox     before 41.0 and Firefox ESR 38.x before 38.3 on Windows,     mishandles shader access, which allowed remote attackers     to execute arbitrary code or cause a denial of service     (memory corruption and application crash) via crafted     (1) OpenGL or (2) WebGL content (bsc#947003).

  - CVE-2015-7179: The     VertexBufferInterface::reserveVertexSpace function in     libGLES in ANGLE, as used in Mozilla Firefox before 41.0     and Firefox ESR 38.x before 38.3 on Windows, incorrectly     allocates memory for shader attribute arrays, which     allowed remote attackers to execute arbitrary code or     cause a denial of service (buffer overflow and     application crash) via crafted (1) OpenGL or (2) WebGL     content (bsc#947003).

  - CVE-2015-4506: Buffer overflow in the     vp9_init_context_buffers function in libvpx, as used in     Mozilla Firefox before 41.0 and Firefox ESR 38.x before     38.3, allowed remote attackers to execute arbitrary code     via a crafted VP9 file (bsc#947003).

  - CVE-2015-4517: NetworkUtils.cpp in Mozilla Firefox     before 41.0 and Firefox ESR 38.x before 38.3 might     allowed remote attackers to cause a denial of service     (memory corruption and application crash) or possibly     have unspecified other impact via unknown vectors     (bsc#947003).

  - CVE-2015-4505: updater.exe in Mozilla Firefox before     41.0 and Firefox ESR 38.x before 38.3 on Windows allowed     local users to write to arbitrary files by conducting a     junction attack and waiting for an update operation by     the Mozilla Maintenance Service (bsc#947003).

  - CVE-2015-4519: Mozilla Firefox before 41.0 and Firefox     ESR 38.x before 38.3 allowed user-assisted remote     attackers to bypass intended access restrictions and     discover a redirect's target URL via crafted JavaScript     code that executes after a drag-and-drop action of an     image into a TEXTBOX element (bsc#947003).

  - CVE-2015-7180: The ReadbackResultWriterD3D11::Run     function in Mozilla Firefox before 41.0 and Firefox ESR     38.x before 38.3 misinterprets the return value of a     function call, which might allowed remote attackers to     cause a denial of service (memory corruption and     application crash) or possibly have unspecified other     impact via unknown vectors (bsc#947003).

  - CVE-2015-7176: The AnimationThread function in Mozilla     Firefox before 41.0 and Firefox ESR 38.x before 38.3     used an incorrect argument to the sscanf function, which     might allowed remote attackers to cause a denial of     service (stack-based buffer overflow and application     crash) or possibly have unspecified other impact via     unknown vectors (bsc#947003).

  - CVE-2015-7177: The InitTextures function in Mozilla     Firefox before 41.0 and Firefox ESR 38.x before 38.3     might allowed remote attackers to cause a denial of     service (memory corruption and application crash) or     possibly have unspecified other impact via unknown     vectors (bsc#947003).

  - CVE-2015-7174: The nsAttrAndChildArray::GrowBy function     in Mozilla Firefox before 41.0 and Firefox ESR 38.x     before 38.3 might allowed remote attackers to cause a     denial of service (memory corruption and application     crash) or possibly have unspecified other impact via     unknown vectors, related to an 'overflow (bsc#947003).

  - CVE-2015-7175: The XULContentSinkImpl::AddText function     in Mozilla Firefox before 41.0 and Firefox ESR 38.x     before 38.3 might allowed remote attackers to cause a     denial of service (memory corruption and application     crash) or possibly have unspecified other impact via     unknown vectors, related to an 'overflow (bsc#947003).

MozillaFirefox ESR was updated to version 38.4.0ESR to fix multiple security issues.

MFSA 2015-116/CVE-2015-4513 Miscellaneous memory safety hazards (rv:42.0 / rv:38.4)

MFSA 2015-122/CVE-2015-7188 Trailing whitespace in IP address hostnames can bypass same-origin policy

MFSA 2015-123/CVE-2015-7189 Buffer overflow during image interactions in canvas

MFSA 2015-127/CVE-2015-7193 CORS preflight is bypassed when non-standard Content-Type headers are received

MFSA 2015-128/CVE-2015-7194 Memory corruption in libjar through zip files

MFSA 2015-130/CVE-2015-7196 JavaScript garbage collection crash with Java applet

MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 Vulnerabilities found through code inspection

MFSA 2015-132/CVE-2015-7197 Mixed content WebSocket policy bypass through workers

MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 NSS and NSPR memory corruption issues

It also includes fixes from 38.3.0ESR :

MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)

MFSA 2015-101/CVE-2015-4506 Buffer overflow in libvpx while parsing vp9 format video

MFSA 2015-105/CVE-2015-4511 Buffer overflow while decoding WebM video

MFSA 2015-106/CVE-2015-4509 Use-after-free while manipulating HTML media content

MFSA 2015-110/CVE-2015-4519 Dragging and dropping images exposes final URL after redirects

MFSA 2015-111/CVE-2015-4520 Errors in the handling of CORS preflight request headers

MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522 CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177 CVE-2015-7180 Vulnerabilities found through code inspection

It also includes fixes from the Firefox 38.2.1ESR release :

MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during restyling

MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on notification bypass through data URLs

It also includes fixes from the Firefox 38.2.0ESR release :

MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)

MFSA 2015-80/CVE-2015-4475 Out-of-bounds read with malformed MP3 file

MFSA 2015-82/CVE-2015-4478 Redefinition of non-configurable JavaScript object properties

MFSA 2015-83/CVE-2015-4479 Overflow issues in libstagefright

MFSA 2015-87/CVE-2015-4484 Crash when using shared memory in JavaScript

MFSA 2015-88/CVE-2015-4491 Heap overflow in gdk-pixbuf when scaling bitmap images

MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 Buffer overflows on Libvpx when decoding WebM video

MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities found through code inspection

MFSA 2015-92/CVE-2015-4492 Use-after-free in XMLHttpRequest with shared workers

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
86238	openSUSE Security Update : MozillaFirefox (openSUSE-2015-619)	Nessus	SuSE Local Security Checks	10/2/2015	1/19/2021	high
86281	openSUSE Security Update : MozillaThunderbird (openSUSE-2015-631)	Nessus	SuSE Local Security Checks	10/6/2015	1/19/2021	high
87063	SUSE SLES10 Security Update : Mozilla Firefox (SUSE-SU-2015:2081-1)	Nessus	SuSE Local Security Checks	11/25/2015	1/6/2021	critical

Detections

Analytics

Plugins Search

high

high

critical