CVE-2015-4495

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.686 · 99 %ileexploit · functionalEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 3 exploits · functional

Likely / severe?

68.6% (99th) EPSS

CVSS 4.3 · medium

Is it mine?

120 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

added 2022-05-25remediate by 2022-06-15

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-22

Mozilla Firefox Security Feature Bypass Vulnerability

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedfirefox-0:38.1.1-1.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.s390 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-0:38.1.1-1.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.s390 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581
Fixedfirefox-debuginfo-0:38.1.1-1.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2015:1581

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–8.8

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nsecondary · FSTEC (BDU) RU

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nsecondary · Red Hat Product Security US

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondaryexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-346US

exploits (3)

Public proof-of-concept and weaponised exploit code.

auxiliary/gather/firefox_pdfjs_file_theftFirefox PDF.js Browser File Theftfunctional · metasploit
EDB-37772Mozilla Firefox < 39.03 - 'pdf.js' Same Origin PolicyPoC · exploit_db
vincd/CVE-2015-4495Exploit for CVE-2015-4495 / mfsa2015-78PoC · poc_in_github

affected products (120)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Mozilla Corp. Firefox≤ 40fstec_bduRU
Mozilla Corp. Firefox ESR≤ 38.2fstec_bduRU
Mozilla Corp. Firefox OS≤ 2.2fstec_bduRU
canonical ubuntu linux= 12.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 14.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 15.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
mozilla firefox< 39.0.3nvdUScpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozilla firefox38.0 → 38.1.1nvdUScpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozilla firefox os< 2.2nvdUScpe:2.3:o:mozilla:firefox_os:*:*:*:*:*:*:*:*
opensuse opensuse= 13.1nvdUScpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*
opensuse opensuse= 13.2nvdUScpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*
oracle solaris= 11.3nvdUScpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
redhat enterprise linux desktop= 5.0nvdUScpe:2.3:o:redhat:enterprise_linux_desktop:*:*:*:*:*:*:*:*
redhat enterprise linux desktop= 6.0nvdUScpe:2.3:o:redhat:enterprise_linux_desktop:*:*:*:*:*:*:*:*
redhat enterprise linux desktop= 7.0nvdUScpe:2.3:o:redhat:enterprise_linux_desktop:*:*:*:*:*:*:*:*
redhat enterprise linux eus= 6.7nvdUScpe:2.3:o:redhat:enterprise_linux_eus:*:*:*:*:*:*:*:*
redhat enterprise linux eus= 7.1nvdUScpe:2.3:o:redhat:enterprise_linux_eus:*:*:*:*:*:*:*:*
redhat enterprise linux eus= 7.2nvdUScpe:2.3:o:redhat:enterprise_linux_eus:*:*:*:*:*:*:*:*
redhat enterprise linux eus= 7.3nvdUScpe:2.3:o:redhat:enterprise_linux_eus:*:*:*:*:*:*:*:*

showing 20 of 120

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2015:1581Red Hat Security Advisory: firefox security update2015-08-07csaf · redhat_csafUS
Updated firefox packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

published 2015-08-08modified 2026-06-17

references (53)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan