The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefox-esrUpgrade libxulUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Sep 22, 2015 |
| Mfsa2015 98 | — | Upgrade to Mozilla Firefox version 41.0Upgrade to the latest version of Mozilla Firefox | Sep 23, 2015 | Sep 22, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.38.0 | Oct 22, 2015 | Sep 24, 2015 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 24, 2015 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-other | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Sep 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub