CVE-2015-7182

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

10.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 95.4% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Critical. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2015-11-05 02:00Z10 YR AGO

Last updated

2024-08-06 07:43Z2 YR AGO

Reserved

2015-09-16

Assigning CNA

mozilla

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
• CWE-122Heap-based Buffer OverflowVariant

Data version

5.1

Document digest

1ff994be9d82e5414209f267928b413a18f88f3b11b44729dc6464655f8e8018

• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlx_refsource_CONFIRM
• www.securitytracker.com1034069http://www.securitytracker.com/id/1034069vdb-entryx_refsource_SECTRACK
• bto.bluecoat.comhttps://bto.bluecoat.com/security-advisory/sa119x_refsource_CONFIRM
• www.debian.orgDSA-3688http://www.debian.org/security/2016/dsa-3688vendor-advisoryx_refsource_DEBIAN
• www.debian.orgDSA-3410http://www.debian.org/security/2015/dsa-3410vendor-advisoryx_refsource_DEBIAN
• lists.opensuse.orgSUSE-SU-2015:2081http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.htmlvendor-advisoryx_refsource_SUSE
• security.gentoo.orgGLSA-201512-10https://security.gentoo.org/glsa/201512-10vendor-advisoryx_refsource_GENTOO
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlx_refsource_CONFIRM
• lists.opensuse.orgSUSE-SU-2015:1981http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00021.htmlvendor-advisoryx_refsource_SUSE
• bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=1202868x_refsource_CONFIRM
• lists.opensuse.orgopenSUSE-SU-2015:2229http://lists.opensuse.org/opensuse-updates/2015-12/msg00037.htmlvendor-advisoryx_refsource_SUSE
• developer.mozilla.orghttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.1_release_notesx_refsource_CONFIRM
• www.ubuntu.comUSN-2785-1http://www.ubuntu.com/usn/USN-2785-1vendor-advisoryx_refsource_UBUNTU
• www.ubuntu.comUSN-2791-1http://www.ubuntu.com/usn/USN-2791-1vendor-advisoryx_refsource_UBUNTU
• lists.opensuse.orgSUSE-SU-2015:1926http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00013.htmlvendor-advisoryx_refsource_SUSE
• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlx_refsource_CONFIRM
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlx_refsource_CONFIRM
• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlx_refsource_CONFIRM
• rhn.redhat.comRHSA-2015:1981http://rhn.redhat.com/errata/RHSA-2015-1981.htmlvendor-advisoryx_refsource_REDHAT
• www.ubuntu.comUSN-2819-1http://www.ubuntu.com/usn/USN-2819-1vendor-advisoryx_refsource_UBUNTU
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlx_refsource_CONFIRM
• www.securityfocus.com91787http://www.securityfocus.com/bid/91787vdb-entryx_refsource_BID
• developer.mozilla.orghttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.4_release_notesx_refsource_CONFIRM
• lists.opensuse.orgopenSUSE-SU-2015:1942http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.htmlvendor-advisoryx_refsource_SUSE
• rhn.redhat.comRHSA-2015:1980http://rhn.redhat.com/errata/RHSA-2015-1980.htmlvendor-advisoryx_refsource_REDHAT
• www.debian.orgDSA-3393http://www.debian.org/security/2015/dsa-3393vendor-advisoryx_refsource_DEBIAN
• developer.mozilla.orghttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.1_release_notesx_refsource_CONFIRM
• packetstormsecurity.comhttp://packetstormsecurity.com/files/134268/Slackware-Security-Advisory-mozilla-nss-Updates.htmlx_refsource_MISC
• www.securityfocus.com77416http://www.securityfocus.com/bid/77416vdb-entryx_refsource_BID
• lists.opensuse.orgopenSUSE-SU-2015:2245http://lists.opensuse.org/opensuse-updates/2015-12/msg00049.htmlvendor-advisoryx_refsource_SUSE
• security.gentoo.orgGLSA-201605-06https://security.gentoo.org/glsa/201605-06vendor-advisoryx_refsource_GENTOO
• www.slackware.comSSA:2015-310-02http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.399753vendor-advisoryx_refsource_SLACKWARE
• www.mozilla.orghttp://www.mozilla.org/security/announce/2015/mfsa2015-133.htmlx_refsource_CONFIRM
• lists.opensuse.orgSUSE-SU-2015:1978http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00020.htmlvendor-advisoryx_refsource_SUSE