CVE-2015-4482: mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local user...

Security readout for executives and security teams

This is an old Mozilla Firefox updater flaw. A local user could use a specially crafted Mozilla Archive file name to corrupt memory, potentially gaining privileges or crashing the updater. The available bundle identifies fixed versions but does not provide CVSS severity or evidence of active exploitation. Exposure is most likely on legacy endpoints, servers, or packaged applications still running Firefox before 40.0 or Firefox ESR 38.x before 38.2. Modern supported Firefox installations should not be affected based on the provided fixed-version information. Handle as a legacy hygiene issue unless old Firefox builds are still present. If affected versions exist on shared systems, remediation matters because the stated impact includes privilege gain. There is no provided evidence of current active exploitation. Mitigation focus: Upgrade Firefox to 40.0 or later where applicable.; Upgrade Firefox ESR 38.x to 38.2 or later.; Apply Mozilla, distribution, or vendor browser security updates..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.