CVE catalog

CVE-2015-0801

Security update for MozillaFirefox

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.82% · Oct 25, 2026

Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1fixed
Ubuntuthunderbird14.041:24.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu0.13.10.1vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.2.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.4.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:24.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.2.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.3.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.4.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.6.0+build1-0ubuntu0.14.04.1fixed
Ubuntuthunderbird14.041:24.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu0.13.10.1vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.2.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.4.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:24.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.2.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.3.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.4.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.6.0+build1-0ubuntu0.14.04.1fixed
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1fixed
Debianicedove710.0.12-1vulnerable
Debianicedove711.0-1vulnerable
Debianicedove716.0.2-1vulnerable
Debianicedove717.0-1vulnerable
Debianicedove717.0.10-1vulnerable
Debianicedove717.0.10-1+powerpcspe1vulnerable
Debianicedove717.0.10-1+powerpcspe2vulnerable
Debianicedove717.0.10-1~deb7u1vulnerable
Debianicedove717.0.2-1vulnerable
Debianicedove717.0.4-1vulnerable
Debianicedove717.0.5-1vulnerable
Debianicedove717.0.5-2vulnerable
Debianicedove717.0.7-1vulnerable
Debianicedove717.0.7-1~deb7u1vulnerable
Debianicedove717.0.8-1vulnerable
Debianicedove717.0.8-1~deb7u1vulnerable
Debianicedove717.0.9-1vulnerable
Debianicedove717.0.9-1~deb7u1vulnerable
Debianicedove717.0.9-2vulnerable
Debianicedove724.0-1vulnerable
Debianicedove724.0~b3-2vulnerable
Debianicedove724.1.1-1vulnerable
Debianicedove724.2.0-1vulnerable
Debianicedove724.2.0-1+alphavulnerable
Debianicedove724.2.0-1+powerpcspe1vulnerable
Debianicedove724.3.0-1vulnerable
Debianicedove724.3.0-2vulnerable
Debianicedove724.4.0-1vulnerable
Debianicedove724.4.0-1~deb7u1vulnerable
Debianicedove724.5.0-1vulnerable
Debianicedove724.5.0-1~deb7u1vulnerable
Debianicedove724.5.0-2vulnerable
Debianicedove724.6.0-1~deb7u1vulnerable
Debianicedove724.7.0-1~deb7u1vulnerable
Debianicedove724.8.0-1~deb7u1vulnerable
Debianicedove724.8.1-1~deb7u1vulnerable
Debianicedove730.0~b1-1vulnerable
Debianicedove731.0-1vulnerable
Debianicedove731.0-2vulnerable
Debianicedove731.0-3vulnerable
Debianicedove731.0~b1-2vulnerable
Debianicedove731.0~b2-1vulnerable
Debianicedove731.1.2-1vulnerable
Debianicedove731.2.0-1vulnerable
Debianicedove731.2.0-1~deb7u1vulnerable
Debianicedove731.3.0-1vulnerable
Debianicedove731.3.0-1+powerpcspe1vulnerable
Debianicedove731.3.0-1~deb7u1vulnerable
Debianicedove731.4.0-1vulnerable
Debianicedove731.4.0-1~deb7u1vulnerable
Debianicedove731.4.0-2vulnerable
Debianicedove731.5.0-1vulnerable
Debianicedove731.5.0-1~deb7u1vulnerable
Debianicedove731.6.0-1~deb7u1fixed
Debianiceweasel710.0.12esr-1vulnerable
Debianiceweasel710.0.12esr-1+alphavulnerable
Debianiceweasel710.0.12esr-1+nmu1vulnerable
Debianiceweasel710.0.12esr-1+nmu1+alphavulnerable
Debianiceweasel711.0-1vulnerable
Debianiceweasel711.0-2vulnerable
Debianiceweasel711.0-3vulnerable
Debianiceweasel711.0-4vulnerable
Debianiceweasel711.0~b1-1vulnerable
Debianiceweasel711.0~b1-2vulnerable
Debianiceweasel711.0~b2-1vulnerable
Debianiceweasel711.0~b3-1vulnerable
Debianiceweasel711.0~b4-1vulnerable
Debianiceweasel711.0~b5-1vulnerable
Debianiceweasel711.0~b6-1vulnerable
Debianiceweasel712.0-1vulnerable
Debianiceweasel712.0-2vulnerable
Debianiceweasel712.0-3vulnerable
Debianiceweasel712.0-4vulnerable
Debianiceweasel712.0-5vulnerable
Debianiceweasel712.0-6vulnerable
Debianiceweasel712.0-7vulnerable
Debianiceweasel713.0-1vulnerable
Debianiceweasel713.0.1-1vulnerable
Debianiceweasel713.0.1-2vulnerable
Debianiceweasel714.0.1-1vulnerable
Debianiceweasel714.0.1-2vulnerable
Debianiceweasel715.0-1vulnerable
Debianiceweasel715.0.1-1vulnerable
Debianiceweasel716.0-1vulnerable
Debianiceweasel716.0.1-1vulnerable
Debianiceweasel716.0.2-1vulnerable
Debianiceweasel717.0-1vulnerable
Debianiceweasel717.0.1-1vulnerable
Debianiceweasel717.0.1-2vulnerable
Debianiceweasel717.0.10esr-1~deb7u1vulnerable
Debianiceweasel717.0.5esr-1vulnerable
Debianiceweasel717.0.6esr-1vulnerable
Debianiceweasel717.0.6esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-1vulnerable
Debianiceweasel717.0.7esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-2vulnerable
Debianiceweasel717.0.8esr-1vulnerable
Debianiceweasel717.0.8esr-1~deb7u1vulnerable
Debianiceweasel717.0.8esr-2vulnerable
Debianiceweasel717.0.8esr-2~deb7u1vulnerable
Debianiceweasel717.0.9esr-1~deb7u1vulnerable
Debianiceweasel718.0-1vulnerable
Debianiceweasel718.0.1-1vulnerable
Debianiceweasel718.0.2-1vulnerable
Debianiceweasel719.0-1vulnerable
Debianiceweasel719.0.2-1vulnerable
Debianiceweasel720.0-1vulnerable
Debianiceweasel721.0-1vulnerable
Debianiceweasel722.0-1vulnerable
Debianiceweasel723.0-1vulnerable
Debianiceweasel723.0-2vulnerable
Debianiceweasel723.0.1-1vulnerable
Debianiceweasel724.0-1vulnerable
Debianiceweasel724.0-2vulnerable
Debianiceweasel724.0~b4-1vulnerable
Debianiceweasel724.0~b7-1vulnerable
Debianiceweasel724.0~b9-1vulnerable
Debianiceweasel724.1.0esr-1vulnerable
Debianiceweasel724.1.0esr-1+powerpcspe1vulnerable
Debianiceweasel724.2.0esr-1vulnerable
Debianiceweasel724.2.0esr-1+alphavulnerable
Debianiceweasel724.2.0esr-1+powerpcspe1vulnerable
Debianiceweasel724.3.0esr-1vulnerable
Debianiceweasel724.3.0esr-1+alphavulnerable
Debianiceweasel724.3.0esr-1~deb7u1vulnerable
Debianiceweasel724.4.0esr-1vulnerable
Debianiceweasel724.4.0esr-1~deb7u2vulnerable
Debianiceweasel724.5.0esr-1vulnerable
Debianiceweasel724.5.0esr-1~deb7u1vulnerable
Debianiceweasel724.6.0esr-1~deb7u1vulnerable
Debianiceweasel724.7.0esr-1~deb7u1vulnerable
Debianiceweasel724.8.0esr-1~deb7u1vulnerable
Debianiceweasel724.8.1esr-1~deb7u1vulnerable
Debianiceweasel725.0-1vulnerable
Debianiceweasel725.0~b3-1vulnerable
Debianiceweasel725.0~b9-1vulnerable
Debianiceweasel726.0-1vulnerable
Debianiceweasel727.0-1vulnerable
Debianiceweasel727.0-2vulnerable
Debianiceweasel727.0.1-1vulnerable
Debianiceweasel728.0-1vulnerable
Debianiceweasel729.0-1vulnerable
Debianiceweasel729.0-2vulnerable
Debianiceweasel729.0.1-1vulnerable
Debianiceweasel729.0.1-1+alphavulnerable
Debianiceweasel729.0.1-2vulnerable
Debianiceweasel730.0-1vulnerable
Debianiceweasel730.0-2vulnerable
Debianiceweasel730.0~b3-1vulnerable
Debianiceweasel730.0~b5-1vulnerable
Debianiceweasel730.0~b5-2vulnerable
Debianiceweasel730.0~b5-3vulnerable
Debianiceweasel730.0~b7-1vulnerable
Debianiceweasel731.0-1vulnerable
Debianiceweasel731.0-2vulnerable
Debianiceweasel731.0-3vulnerable
Debianiceweasel731.0~b1-1vulnerable
Debianiceweasel731.0~b3-1vulnerable
Debianiceweasel731.1.0esr-1vulnerable
Debianiceweasel731.2.0esr-1vulnerable
Debianiceweasel731.2.0esr-1~deb7u1vulnerable
Debianiceweasel731.2.0esr-2vulnerable
Debianiceweasel731.2.0esr-2+hurd.0vulnerable
Debianiceweasel731.2.0esr-2~deb7u1vulnerable
Debianiceweasel731.2.0esr-3vulnerable
Debianiceweasel731.2.0esr-3~deb7u1vulnerable
Debianiceweasel731.3.0esr-1vulnerable
Debianiceweasel731.3.0esr-1+powerpcspe1vulnerable
Debianiceweasel731.3.0esr-1~deb7u1vulnerable
Debianiceweasel731.4.0esr-1vulnerable
Debianiceweasel731.4.0esr-1~deb7u1vulnerable
Debianiceweasel731.5.0esr-1vulnerable
Debianiceweasel731.5.0esr-1~deb7u1vulnerable
Debianiceweasel731.5.3esr-1vulnerable
Debianiceweasel731.5.3esr-1~deb7u1vulnerable
Debianiceweasel731.6.0esr-1~deb7u1fixed
SuseMozillaFirefoxlinux enterprise software development kit 1231.6.0esr-30.1fixed
SuseMozillaFirefoxlinux enterprise server 1231.6.0esr-30.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 1231.6.0esr-30.1fixed
SuseMozillaFirefoxlinux enterprise desktop 1231.6.0esr-30.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb14.0437.0+build2-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2015-0801Not reported
Ubuntuthunderbirddeb14.041:31.6.0+build1-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2015-0801Not reported
Ubuntuthunderbirddeb14.041:31.6.0+build1-0ubuntu0.14.04.1Not reportedUSN-2552-1Not reported
Ubuntufirefoxdeb14.0437.0+build2-0ubuntu0.14.04.1Not reportedUSN-2550-1Not reported
Debianicedovedeb731.6.0-1~deb7u1Not reportedDSA-3212-1Not reported
Debianiceweaseldeb731.6.0esr-1~deb7u1Not reportedDSA-3211-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 1231.6.0esr-30.1Not reportedSUSE-SU-2015:0704-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 1231.6.0esr-30.1Not reportedSUSE-SU-2015:0704-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 1231.6.0esr-30.1Not reportedSUSE-SU-2015:0704-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 1231.6.0esr-30.1Not reportedSUSE-SU-2015:0704-2Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References