CVE-2015-7200 PUBLISHED

The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.

EPSS 2.29% · 84.6th percentile

Risk Scores

EPSS Score
2.29%
84.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSthunderbird0, 1:24.0+build1-0ubuntu1, 1:24.0+build1-0ubuntu2
Ubuntu:14.04:LTSfirefox37.0.2+build1-0ubuntu0.14.04.1, 38.0+build3-0ubuntu0.14.04.1, 39.0+build5-0ubuntu0.14.04.1

Timeline

References

Open in Interactive Console →