---
title: "CVE-2015-2737\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2015-2737?format=md
keywords: index, follow
---

# CVE-2015-2737

Publication date 5 July 2015

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in
Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before
38.1, and Thunderbird before 38.1 reads data from uninitialized memory
locations, which has unspecified impact and attack vectors.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| firefox | 15.04 vivid | Fixed 39.0+build5-0ubuntu0.15.04.1 |
| 14.10 utopic | Fixed 39.0+build5-0ubuntu0.14.10.1 |
| 14.04 LTS trusty | Fixed 39.0+build5-0ubuntu0.14.04.1 |
| 12.04 LTS precise | Fixed 39.0+build5-0ubuntu0.12.04.2 |
| thunderbird | 15.04 vivid | Fixed 1:31.8.0+build1-0ubuntu0.15.04.1 |
| 14.10 utopic | Fixed 1:31.8.0+build1-0ubuntu0.14.10.1 |
| 14.04 LTS trusty | Fixed 1:31.8.0+build1-0ubuntu0.14.04.1 |
| 12.04 LTS precise | Fixed 1:31.8.0+build1-0ubuntu0.12.04.1 |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2737)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2015-2737)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2015-2737)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2015-2737)

### Related Ubuntu Security Notices (USN)

+ [USN-2673-1](https://usn.ubuntu.com/USN-2673-1)
+ Thunderbird vulnerabilities
+ 20 July 2015

+ [USN-2656-1](https://usn.ubuntu.com/USN-2656-1)
+ Firefox vulnerabilities
+ 9 July 2015

+ [USN-2656-2](https://usn.ubuntu.com/USN-2656-2)
+ Firefox vulnerabilities
+ 15 July 2015

### Other references

* <https://www.mozilla.org/en-US/security/advisories/mfsa2015-66/>
* <https://bugzilla.mozilla.org/show_bug.cgi?id=1167332>
* <http://www.mozilla.org/security/announce/2015/mfsa2015-66.html>
* <https://www.cve.org/CVERecord?id=CVE-2015-2737>