Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:mozilla/Firefox@36.0.3
Typemozilla
Namespace
NameFirefox
Version36.0.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version36.0.4
Latest_non_vulnerable_version151.0.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-q89v-v5au-w7a1
vulnerability_id VCID-q89v-v5au-w7a1
summary 
Security researcher ilxu1a reported, through HP Zero Day
Initiative's Pwn2Own contest, a flaw in Mozilla's implementation of typed array
bounds checking in JavaScript just-in-time compilation (JIT) and its management
of bounds checking for heap access. This flaw can be leveraged into the reading
and writing of memory allowing for arbitrary code execution on the local system.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817
reference_id CVE-2015-0817
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2015-29
reference_id mfsa2015-29
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2015-29
fixed_packages
0
url pkg:mozilla/Firefox@36.0.3
purl pkg:mozilla/Firefox@36.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@36.0.3
aliases CVE-2015-0817
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q89v-v5au-w7a1
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@36.0.3