CVE-2015-2736

CVE-2015-2736 describes a memory access vulnerability in the nsZipArchive::BuildFileList function of Mozilla Firefox, Firefox ESR, and Thunderbird. A remote attacker could exploit this flaw by crafting a malicious ZIP archive, leading to an unspecified but potentially severe impact. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-based attack with medium complexity that could result in complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.