The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefox | Dec 1, 2016 | Nov 5, 2015 |
| Debian | — | Upgrade icedoveUpgrade iceweasel | Nov 9, 2015 | Nov 5, 2015 |
| Freebsd | — | Upgrade linux-firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade firefoxUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade libxulUpgrade nssUpgrade linux-c6-nsprUpgrade nsprUpgrade linux-thunderbird | Dec 10, 2025 | Nov 19, 2015 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Nov 5, 2015 |
| Mfsa2015 128 | — | Upgrade to Mozilla Firefox ESR version 38.4Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 42.0 | Nov 4, 2015 | Nov 3, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 38.4Upgrade to the latest version of Mozilla Thunderbird | Nov 30, 2015 | Nov 5, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade mail/thunderbird to version 45.3.0-0.175.3.14.0.4.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade developer/yasm to version 1.3.0-0.175.3.14.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 5, 2015 |
| Oracle_linux | — | Upgrade firefox | Oct 16, 2024 | Nov 5, 2015 |
| Suse | — | Upgrade mozilla-nsprUpgrade mozilla-nspr-x86Upgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade libfreebl3-32bitUpgrade mozilla-nss-develUpgrade MozillaThunderbird-develUpgrade libsoftokn3-hmacUpgrade mozilla-nss-x86Upgrade libfreebl3-hmac-32bitUpgrade mozilla-nss-32bitUpgrade libsoftokn3-x86Upgrade mozillafirefox-branding-sleUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-certsUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade libfreebl3-hmacUpgrade MozillaThunderbirdUpgrade libsoftokn3-32bitUpgrade libfreebl3-x86Upgrade libfreebl3Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-other | Dec 18, 2015 | Nov 5, 2015 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 9, 2015 | Nov 5, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub