CVE ID:	CVE-2015-2736
Description:	The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2736 BugTraq ID: 75541 http://www.securityfocus.com/bid/75541 Debian Security Information: DSA-3300 (Google Search) http://www.debian.org/security/2015/dsa-3300 Debian Security Information: DSA-3324 (Google Search) http://www.debian.org/security/2015/dsa-3324 https://security.gentoo.org/glsa/201512-10 RedHat Security Advisories: RHSA-2015:1207 http://rhn.redhat.com/errata/RHSA-2015-1207.html RedHat Security Advisories: RHSA-2015:1455 http://rhn.redhat.com/errata/RHSA-2015-1455.html http://www.securitytracker.com/id/1032783 http://www.securitytracker.com/id/1032784 SuSE Security Announcement: SUSE-SU-2015:1268 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html SuSE Security Announcement: SUSE-SU-2015:1269 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html SuSE Security Announcement: SUSE-SU-2015:1449 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html SuSE Security Announcement: openSUSE-SU-2015:1229 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html SuSE Security Announcement: openSUSE-SU-2015:1266 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html http://www.ubuntu.com/usn/USN-2656-1 http://www.ubuntu.com/usn/USN-2656-2 http://www.ubuntu.com/usn/USN-2673-1