CVE-2015-7188
Publication date 4 November 2015
Last updated 24 July 2024
Ubuntu priority
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting (XSS) attacks, by appending whitespace characters to an IP address string.
Status
Package | Ubuntu Release | Status |
---|---|---|
firefox | ||
14.04 LTS trusty |
Fixed 42.0+build2-0ubuntu0.14.04.1
|
|
thunderbird | ||
14.04 LTS trusty |
Fixed 1:38.4.0+build3-0ubuntu0.14.04.1
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2785-1
- Firefox vulnerabilities
- 4 November 2015
- USN-2819-1
- Thunderbird vulnerabilities
- 1 December 2015