oracle traffic-director CVE-2015-7182 in Oracle and Mozilla Products
Published on November 5, 2015

product logo product logo product logo
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2015-7182

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2015-7182 are published in these products:

Oracle Traffic Director
 
Oracle Opensso
 
Oracle Iplanet Web Proxy Server
 
Mozilla Firefox
 
Oracle Glassfish Server
 
Mozilla Network Security Services
 
Oracle Iplanet Web Server
 

Exploit Probability

EPSS
12.32%
Percentile
93.72%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.