The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox | Sep 20, 2017 | Sep 24, 2015 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefoxUpgrade libxulUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Sep 22, 2015 |
| Mfsa2015 113 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 41.0Upgrade to Mozilla Firefox ESR version 38.3 | Sep 23, 2015 | Sep 22, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.38Upgrade to the latest version of Mozilla SeaMonkey | Oct 22, 2015 | Sep 24, 2015 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 38.3 | Nov 30, 2015 | Sep 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3Upgrade mail/thunderbird to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3 | May 29, 2017 | Sep 24, 2015 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-develUpgrade MozillaFirefox-translations-common | Dec 18, 2015 | Sep 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub