CVE-2015-7200: High severity firefox vulnerability
Published Nov 5, 2015
·Updated
The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
Affected Software
17 affected components
Mozilla Firefox<=41.0.2
Mozilla Firefox=38.0
Mozilla Firefox=38.0.1
Mozilla Firefox=38.0.5
Mozilla Firefox=38.1.0
Mozilla Firefox=38.1.1
Mozilla Firefox=38.2.0
Mozilla Firefox=38.2.1
Mozilla Firefox=38.3.0
Mozilla Firefox ESR=38.0
Mozilla Firefox ESR=38.0.1
Mozilla Firefox ESR=38.0.5
Mozilla Firefox ESR=38.1.0
Mozilla Firefox ESR=38.1.1
Mozilla Firefox ESR=38.2.0
Mozilla Firefox ESR=38.2.1
Mozilla Firefox ESR=38.3.0
Event History
Nov 5, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7200?
CVE-2015-7200 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2015-7200?
To mitigate CVE-2015-7200, upgrade to Mozilla Firefox version 42.0 or later, or Firefox ESR 38.4 or later.
3
What does CVE-2015-7200 affect?
CVE-2015-7200 affects various versions of Mozilla Firefox and Firefox ESR prior to specified versions.
4
Can CVE-2015-7200 impact data integrity?
Yes, CVE-2015-7200 could potentially allow attackers to undermine data integrity via cryptographic key vulnerabilities.
5
When was CVE-2015-7200 disclosed?
CVE-2015-7200 was disclosed in November 2015.