CVE-2015-0827

MEDIUM 4.3CVE-2015-0827 · Published 25/02/2015 · updated 17/06/2026

In short

CVE-2015-0827 is a MEDIUM (CVSS 4.3) vulnerability affecting firefox (mozilla), firefox esr (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`= 0.1= 0.10= 0.10.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.6.1= 0.7= 0.7.1= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.4.1= 1.5= 1.5.0.1= 1.5.0.10= 1.5.0.11= 1.5.0.12= 1.5.0.2= 1.5.0.3= 1.5.0.4= 1.5.0.5= 1.5.0.6= 1.5.0.7= 1.5.0.8= 1.5.0.9= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.8= 10.0= 10.0.1= 10.0.10= 10.0.11= 10.0.12= 10.0.2= 10.0.3= 10.0.4= 10.0.5= 10.0.6= 10.0.7= 10.0.8= 10.0.9= 11.0= 12.0= 13.0= 13.0.1= 14.0= 14.0.1= 15.0= 15.0.1= 16.0= 16.0.1= 16.0.2= 17.0= 17.0.1= 17.0.10= 17.0.11= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6= 17.0.7= 17.0.8= 17.0.9= 18.0= 18.0.1= 18.0.2= 19.0= 19.0.1= 19.0.2= 2.0= 2.0.0.1= 2.0.0.10= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.15= 2.0.0.16= 2.0.0.17= 2.0.0.18= 2.0.0.19= 2.0.0.2= 2.0.0.20= 2.0.0.3= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.7= 2.0.0.8= 2.0.0.9= 20.0= 20.0.1= 21.0= 22.0= 23.0= 23.0.1= 24.0= 24.1= 24.1.1= 25.0= 25.0.1= 26.0= 27.0= 27.0.1= 28.0= 29.0= 29.0.1= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.5= 3.5.1= 3.5.10= 3.5.11= 3.5.12= 3.5.13= 3.5.14= 3.5.15= 3.5.16= 3.5.17= 3.5.18= 3.5.19= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9= 3.6= 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.14= 3.6.15= 3.6.16= 3.6.17= 3.6.18= 3.6.19= 3.6.2= 3.6.20= 3.6.21= 3.6.22= 3.6.23= 3.6.24= 3.6.25= 3.6.26= 3.6.27= 3.6.28= 3.6.3= 3.6.4= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 30.0= 31.0= 31.1.0= 31.1.1= 32.0= 33.0= 34.0.5= 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1= 8.0= 8.0.1= 9.0= 9.0.1≤ 35.0.1`	No fix yet
firefox esr mozilla	`= 31.1= 31.2= 31.3= 31.4= 31.5`	No fix yet
thunderbird mozilla	`= 31.0= 31.1.2= 31.2= 31.3≤ 31.4`	No fix yet

Description

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

References

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free