Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-2xup-1er1-xuh1
Summary
Security researcher David Chan reported that Mozilla's
mozTCPSocket implementation could leak data past the end of an array,
allowing for the potential exposure of memory or private data to malicious servers.
This feature is used by Firefox OS and is disabled by default in Firefox
on other operating systems.
Aliases
0
alias CVE-2015-4503
Fixed_packages
0
url pkg:mozilla/Firefox@41.0.0
purl pkg:mozilla/Firefox@41.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@41.0.0
1
url pkg:mozilla/SeaMonkey@2.38.0
purl pkg:mozilla/SeaMonkey@2.38.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@2.38.0
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4503.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4503.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4503
reference_id
reference_type
scores
0
value 0.00575
scoring_system epss
scoring_elements 0.68824
published_at 2026-04-24T12:55:00Z
1
value 0.00575
scoring_system epss
scoring_elements 0.68681
published_at 2026-04-01T12:55:00Z
2
value 0.00575
scoring_system epss
scoring_elements 0.68699
published_at 2026-04-02T12:55:00Z
3
value 0.00575
scoring_system epss
scoring_elements 0.68718
published_at 2026-04-04T12:55:00Z
4
value 0.00575
scoring_system epss
scoring_elements 0.68696
published_at 2026-04-07T12:55:00Z
5
value 0.00575
scoring_system epss
scoring_elements 0.68747
published_at 2026-04-08T12:55:00Z
6
value 0.00575
scoring_system epss
scoring_elements 0.68766
published_at 2026-04-09T12:55:00Z
7
value 0.00575
scoring_system epss
scoring_elements 0.68789
published_at 2026-04-11T12:55:00Z
8
value 0.00575
scoring_system epss
scoring_elements 0.68774
published_at 2026-04-12T12:55:00Z
9
value 0.00575
scoring_system epss
scoring_elements 0.68745
published_at 2026-04-13T12:55:00Z
10
value 0.00575
scoring_system epss
scoring_elements 0.68787
published_at 2026-04-16T12:55:00Z
11
value 0.00575
scoring_system epss
scoring_elements 0.68797
published_at 2026-04-18T12:55:00Z
12
value 0.00575
scoring_system epss
scoring_elements 0.68776
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4503
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1265591
reference_id 1265591
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1265591
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4503
reference_id CVE-2015-4503
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4503
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2015-97
reference_id mfsa2015-97
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2015-97
Weaknesses
0
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-2xup-1er1-xuh1