Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-s76d-pjvk-63cr
Summary
Multiple vulnerabilities have been found in Firefox, Thunderbird,
    Network Security Services (NSS), and NetScape Portable Runtime (NSPR) with
    the worst of which may allow remote execution of arbitrary code.
Aliases
0
alias CVE-2015-4485
Fixed_packages
0
url pkg:deb/debian/libvpx@1.4.0-1?distro=trixie
purl pkg:deb/debian/libvpx@1.4.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.4.0-1%3Fdistro=trixie
1
url pkg:deb/debian/libvpx@1.6.0-2~bpo8%2B1
purl pkg:deb/debian/libvpx@1.6.0-2~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-59n6-fj5x-33gn
1
vulnerability VCID-5bx8-w9sb-1bbs
2
vulnerability VCID-5n7c-tqzz-nfha
3
vulnerability VCID-7s5h-zrax-hkcv
4
vulnerability VCID-8vka-qus2-tbhj
5
vulnerability VCID-98mt-7srw-qfh4
6
vulnerability VCID-djwx-su1m-57h4
7
vulnerability VCID-f81v-9fv8-93cd
8
vulnerability VCID-hhsp-7swr-qybd
9
vulnerability VCID-hkfy-wbqn-sba8
10
vulnerability VCID-kuxu-ty5p-8qbf
11
vulnerability VCID-mcab-z6qn-gkds
12
vulnerability VCID-nw6w-7x8f-x7fw
13
vulnerability VCID-qcyp-en6e-vya2
14
vulnerability VCID-txwy-bkhg-9qfv
15
vulnerability VCID-ut2r-gvwc-4ydu
16
vulnerability VCID-veqq-773w-1ba9
17
vulnerability VCID-wg9d-bt6y-6yfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.6.0-2~bpo8%252B1
2
url pkg:deb/debian/libvpx@1.9.0-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/libvpx@1.9.0-1%2Bdeb11u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.9.0-1%252Bdeb11u3%3Fdistro=trixie
3
url pkg:deb/debian/libvpx@1.12.0-1%2Bdeb12u4?distro=trixie
purl pkg:deb/debian/libvpx@1.12.0-1%2Bdeb12u4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.12.0-1%252Bdeb12u4%3Fdistro=trixie
4
url pkg:deb/debian/libvpx@1.15.0-2.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/libvpx@1.15.0-2.1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.15.0-2.1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/libvpx@1.16.0-3?distro=trixie
purl pkg:deb/debian/libvpx@1.16.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.16.0-3%3Fdistro=trixie
6
url pkg:ebuild/dev-libs/nspr@4.12
purl pkg:ebuild/dev-libs/nspr@4.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nspr@4.12
7
url pkg:ebuild/dev-libs/nss@3.22.2
purl pkg:ebuild/dev-libs/nss@3.22.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nss@3.22.2
8
url pkg:ebuild/dev-libs/nss@4.12
purl pkg:ebuild/dev-libs/nss@4.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/nss@4.12
9
url pkg:ebuild/mail-client/thunderbird@3.22.2
purl pkg:ebuild/mail-client/thunderbird@3.22.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@3.22.2
10
url pkg:ebuild/mail-client/thunderbird@4.12
purl pkg:ebuild/mail-client/thunderbird@4.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@4.12
11
url pkg:ebuild/mail-client/thunderbird@38.7.0
purl pkg:ebuild/mail-client/thunderbird@38.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird@38.7.0
12
url pkg:ebuild/mail-client/thunderbird-bin@3.22.2
purl pkg:ebuild/mail-client/thunderbird-bin@3.22.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@3.22.2
13
url pkg:ebuild/mail-client/thunderbird-bin@4.12
purl pkg:ebuild/mail-client/thunderbird-bin@4.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@4.12
14
url pkg:ebuild/mail-client/thunderbird-bin@38.7.0
purl pkg:ebuild/mail-client/thunderbird-bin@38.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/mail-client/thunderbird-bin@38.7.0
15
url pkg:ebuild/www-client/firefox@3.22.2
purl pkg:ebuild/www-client/firefox@3.22.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox@3.22.2
16
url pkg:ebuild/www-client/firefox@4.12
purl pkg:ebuild/www-client/firefox@4.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox@4.12
17
url pkg:ebuild/www-client/firefox@38.7.0
purl pkg:ebuild/www-client/firefox@38.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox@38.7.0
18
url pkg:ebuild/www-client/firefox-bin@3.22.2
purl pkg:ebuild/www-client/firefox-bin@3.22.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox-bin@3.22.2
19
url pkg:ebuild/www-client/firefox-bin@4.12
purl pkg:ebuild/www-client/firefox-bin@4.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox-bin@4.12
20
url pkg:ebuild/www-client/firefox-bin@38.7.0
purl pkg:ebuild/www-client/firefox-bin@38.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-client/firefox-bin@38.7.0
21
url pkg:mozilla/Firefox@40.0.0
purl pkg:mozilla/Firefox@40.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@40.0.0
22
url pkg:mozilla/Firefox%20ESR@38.2.0
purl pkg:mozilla/Firefox%20ESR@38.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@38.2.0
23
url pkg:mozilla/Firefox%20OS@2.5.0
purl pkg:mozilla/Firefox%20OS@2.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520OS@2.5.0
24
url pkg:mozilla/SeaMonkey@2.35.0
purl pkg:mozilla/SeaMonkey@2.35.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@2.35.0
Affected_packages
0
url pkg:deb/debian/libvpx@0.9.1-2
purl pkg:deb/debian/libvpx@0.9.1-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4mzm-67bs-d3h9
1
vulnerability VCID-4xgr-unyn-jkfj
2
vulnerability VCID-59n6-fj5x-33gn
3
vulnerability VCID-5bx8-w9sb-1bbs
4
vulnerability VCID-5n7c-tqzz-nfha
5
vulnerability VCID-7s5h-zrax-hkcv
6
vulnerability VCID-8vka-qus2-tbhj
7
vulnerability VCID-98mt-7srw-qfh4
8
vulnerability VCID-d1xs-2tfm-2ud6
9
vulnerability VCID-djwx-su1m-57h4
10
vulnerability VCID-f81v-9fv8-93cd
11
vulnerability VCID-hhsp-7swr-qybd
12
vulnerability VCID-hkfy-wbqn-sba8
13
vulnerability VCID-kuxu-ty5p-8qbf
14
vulnerability VCID-mcab-z6qn-gkds
15
vulnerability VCID-nw6w-7x8f-x7fw
16
vulnerability VCID-qcyp-en6e-vya2
17
vulnerability VCID-qjuf-f8ec-byc7
18
vulnerability VCID-s76d-pjvk-63cr
19
vulnerability VCID-tbkw-k4a7-43fp
20
vulnerability VCID-txwy-bkhg-9qfv
21
vulnerability VCID-ut2r-gvwc-4ydu
22
vulnerability VCID-veqq-773w-1ba9
23
vulnerability VCID-wg9d-bt6y-6yfd
24
vulnerability VCID-yhw4-v629-jye8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@0.9.1-2
1
url pkg:deb/debian/libvpx@1.1.0-1
purl pkg:deb/debian/libvpx@1.1.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4xgr-unyn-jkfj
1
vulnerability VCID-59n6-fj5x-33gn
2
vulnerability VCID-5bx8-w9sb-1bbs
3
vulnerability VCID-5n7c-tqzz-nfha
4
vulnerability VCID-7s5h-zrax-hkcv
5
vulnerability VCID-8vka-qus2-tbhj
6
vulnerability VCID-98mt-7srw-qfh4
7
vulnerability VCID-djwx-su1m-57h4
8
vulnerability VCID-f81v-9fv8-93cd
9
vulnerability VCID-hhsp-7swr-qybd
10
vulnerability VCID-hkfy-wbqn-sba8
11
vulnerability VCID-kuxu-ty5p-8qbf
12
vulnerability VCID-mcab-z6qn-gkds
13
vulnerability VCID-nw6w-7x8f-x7fw
14
vulnerability VCID-qcyp-en6e-vya2
15
vulnerability VCID-qjuf-f8ec-byc7
16
vulnerability VCID-s76d-pjvk-63cr
17
vulnerability VCID-tbkw-k4a7-43fp
18
vulnerability VCID-txwy-bkhg-9qfv
19
vulnerability VCID-ut2r-gvwc-4ydu
20
vulnerability VCID-veqq-773w-1ba9
21
vulnerability VCID-wg9d-bt6y-6yfd
22
vulnerability VCID-yhw4-v629-jye8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.1.0-1
2
url pkg:deb/debian/libvpx@1.3.0-3
purl pkg:deb/debian/libvpx@1.3.0-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-59n6-fj5x-33gn
1
vulnerability VCID-5bx8-w9sb-1bbs
2
vulnerability VCID-5n7c-tqzz-nfha
3
vulnerability VCID-7s5h-zrax-hkcv
4
vulnerability VCID-8vka-qus2-tbhj
5
vulnerability VCID-98mt-7srw-qfh4
6
vulnerability VCID-djwx-su1m-57h4
7
vulnerability VCID-f81v-9fv8-93cd
8
vulnerability VCID-hhsp-7swr-qybd
9
vulnerability VCID-hkfy-wbqn-sba8
10
vulnerability VCID-kuxu-ty5p-8qbf
11
vulnerability VCID-mcab-z6qn-gkds
12
vulnerability VCID-nw6w-7x8f-x7fw
13
vulnerability VCID-qcyp-en6e-vya2
14
vulnerability VCID-qjuf-f8ec-byc7
15
vulnerability VCID-s76d-pjvk-63cr
16
vulnerability VCID-tbkw-k4a7-43fp
17
vulnerability VCID-txwy-bkhg-9qfv
18
vulnerability VCID-ut2r-gvwc-4ydu
19
vulnerability VCID-veqq-773w-1ba9
20
vulnerability VCID-wg9d-bt6y-6yfd
21
vulnerability VCID-yhw4-v629-jye8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.3.0-3
3
url pkg:deb/debian/libvpx@1.3.0-3%2Bdeb8u1
purl pkg:deb/debian/libvpx@1.3.0-3%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-59n6-fj5x-33gn
1
vulnerability VCID-5bx8-w9sb-1bbs
2
vulnerability VCID-5n7c-tqzz-nfha
3
vulnerability VCID-7s5h-zrax-hkcv
4
vulnerability VCID-8vka-qus2-tbhj
5
vulnerability VCID-98mt-7srw-qfh4
6
vulnerability VCID-djwx-su1m-57h4
7
vulnerability VCID-f81v-9fv8-93cd
8
vulnerability VCID-hhsp-7swr-qybd
9
vulnerability VCID-hkfy-wbqn-sba8
10
vulnerability VCID-kuxu-ty5p-8qbf
11
vulnerability VCID-mcab-z6qn-gkds
12
vulnerability VCID-nw6w-7x8f-x7fw
13
vulnerability VCID-qcyp-en6e-vya2
14
vulnerability VCID-qjuf-f8ec-byc7
15
vulnerability VCID-s76d-pjvk-63cr
16
vulnerability VCID-tbkw-k4a7-43fp
17
vulnerability VCID-txwy-bkhg-9qfv
18
vulnerability VCID-ut2r-gvwc-4ydu
19
vulnerability VCID-veqq-773w-1ba9
20
vulnerability VCID-wg9d-bt6y-6yfd
21
vulnerability VCID-yhw4-v629-jye8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvpx@1.3.0-3%252Bdeb8u1
4
url pkg:rpm/redhat/firefox@38.2.0-4?arch=el6_7
purl pkg:rpm/redhat/firefox@38.2.0-4?arch=el6_7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16z9-nfq6-cyfm
1
vulnerability VCID-6kac-5ery-wuew
2
vulnerability VCID-drq5-6jps-skax
3
vulnerability VCID-gaq6-9xu7-n7fk
4
vulnerability VCID-jqed-5g3b-auag
5
vulnerability VCID-nyur-qfet-9ua8
6
vulnerability VCID-nzr5-nt1n-akg1
7
vulnerability VCID-s76d-pjvk-63cr
8
vulnerability VCID-tbkw-k4a7-43fp
9
vulnerability VCID-teza-m5kj-s7ac
10
vulnerability VCID-tsmv-w2tb-hyht
11
vulnerability VCID-ueke-9crt-qybh
12
vulnerability VCID-v3rg-mrwe-yqck
13
vulnerability VCID-x2yk-hpvu-6fg6
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@38.2.0-4%3Farch=el6_7
5
url pkg:rpm/redhat/firefox@38.2.0-4?arch=el5_11
purl pkg:rpm/redhat/firefox@38.2.0-4?arch=el5_11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16z9-nfq6-cyfm
1
vulnerability VCID-6kac-5ery-wuew
2
vulnerability VCID-drq5-6jps-skax
3
vulnerability VCID-gaq6-9xu7-n7fk
4
vulnerability VCID-jqed-5g3b-auag
5
vulnerability VCID-nyur-qfet-9ua8
6
vulnerability VCID-nzr5-nt1n-akg1
7
vulnerability VCID-s76d-pjvk-63cr
8
vulnerability VCID-tbkw-k4a7-43fp
9
vulnerability VCID-teza-m5kj-s7ac
10
vulnerability VCID-tsmv-w2tb-hyht
11
vulnerability VCID-ueke-9crt-qybh
12
vulnerability VCID-v3rg-mrwe-yqck
13
vulnerability VCID-x2yk-hpvu-6fg6
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@38.2.0-4%3Farch=el5_11
6
url pkg:rpm/redhat/firefox@38.2.0-4?arch=el7_1
purl pkg:rpm/redhat/firefox@38.2.0-4?arch=el7_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16z9-nfq6-cyfm
1
vulnerability VCID-6kac-5ery-wuew
2
vulnerability VCID-drq5-6jps-skax
3
vulnerability VCID-gaq6-9xu7-n7fk
4
vulnerability VCID-jqed-5g3b-auag
5
vulnerability VCID-nyur-qfet-9ua8
6
vulnerability VCID-nzr5-nt1n-akg1
7
vulnerability VCID-s76d-pjvk-63cr
8
vulnerability VCID-tbkw-k4a7-43fp
9
vulnerability VCID-teza-m5kj-s7ac
10
vulnerability VCID-tsmv-w2tb-hyht
11
vulnerability VCID-ueke-9crt-qybh
12
vulnerability VCID-v3rg-mrwe-yqck
13
vulnerability VCID-x2yk-hpvu-6fg6
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@38.2.0-4%3Farch=el7_1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4485.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4485.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4485
reference_id
reference_type
scores
0
value 0.07599
scoring_system epss
scoring_elements 0.91852
published_at 2026-04-13T12:55:00Z
1
value 0.07599
scoring_system epss
scoring_elements 0.9181
published_at 2026-04-01T12:55:00Z
2
value 0.07599
scoring_system epss
scoring_elements 0.91818
published_at 2026-04-02T12:55:00Z
3
value 0.07599
scoring_system epss
scoring_elements 0.91824
published_at 2026-04-04T12:55:00Z
4
value 0.07599
scoring_system epss
scoring_elements 0.91832
published_at 2026-04-07T12:55:00Z
5
value 0.07599
scoring_system epss
scoring_elements 0.91845
published_at 2026-04-08T12:55:00Z
6
value 0.07599
scoring_system epss
scoring_elements 0.91851
published_at 2026-04-09T12:55:00Z
7
value 0.07599
scoring_system epss
scoring_elements 0.91855
published_at 2026-04-11T12:55:00Z
8
value 0.07599
scoring_system epss
scoring_elements 0.91856
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4485
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1252292
reference_id 1252292
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1252292
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4485
reference_id CVE-2015-4485
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4485
4
reference_url https://security.gentoo.org/glsa/201605-06
reference_id GLSA-201605-06
reference_type
scores
url https://security.gentoo.org/glsa/201605-06
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2015-89
reference_id mfsa2015-89
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2015-89
6
reference_url https://access.redhat.com/errata/RHSA-2015:1586
reference_id RHSA-2015:1586
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1586
7
reference_url https://usn.ubuntu.com/2702-1/
reference_id USN-2702-1
reference_type
scores
url https://usn.ubuntu.com/2702-1/
Weaknesses
0
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-s76d-pjvk-63cr