CVE-2015-0798 | BDVDB-2026-68817 Detail

Description#

The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.gentoo.org/glsa/201512-10
http://www.mozilla.org/security/announce/2015/mfsa2015-43.html
http://www.securitytracker.com/id/1032029
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1147597

Exploit#

No public exploit known

History#

Version 12015-04-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.