CVE-2015-7214

Publication date 15 December 2015

Last updated 24 July 2024


Ubuntu priority

Description

Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.

Status

Package Ubuntu Release Status
firefox 15.10 wily
Fixed in 43.0+build1-0ubuntu0.15.10.1
15.04 vivid
Fixed in 43.0+build1-0ubuntu0.15.04.1
14.04 LTS trusty
Fixed in 43.0+build1-0ubuntu0.14.04.1
12.04 LTS precise
Fixed in 43.0+build1-0ubuntu0.12.04.1
thunderbird 15.10 wily
Fixed in 1:38.5.1+build2-0ubuntu0.15.10.1
15.04 vivid
Fixed in 1:38.5.1+build2-0ubuntu0.15.04.1
14.04 LTS trusty
Fixed in 1:38.5.1+build2-0ubuntu0.14.04.1
12.04 LTS precise
Fixed in 1:38.5.1+build2-0ubuntu0.12.04.1

References

Related Ubuntu Security Notices (USN)

    • USN-2859-1
    • Thunderbird vulnerabilities
    • 13 January 2016
    • USN-2833-1
    • Firefox vulnerabilities
    • 15 December 2015

Other references


Access our resources on patching vulnerabilities