Published: 24/03/2015 Updated: 22/12/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Mozilla Firefox prior to 36.0.4, Firefox ESR 31.x prior to 31.5.3, and SeaMonkey prior to 2.33.1 allow remote malicious users to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox esr 31.5.1
mozilla firefox esr 31.5.2
mozilla firefox esr 31.1
mozilla firefox
mozilla firefox esr 31.5
mozilla firefox esr 31.1.1
mozilla firefox esr 31.1.0
mozilla firefox esr 31.4
mozilla firefox esr 31.3.0
mozilla firefox esr 31.0
mozilla seamonkey
mozilla firefox esr 31.3
mozilla firefox esr 31.2

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-0817 ilxu1a reported a flaw in Mozilla's implementation of typed array bounds checking in JavaScript just-in-time compilation (JIT) and its ...

Mozilla Foundation Security Advisory 2015-28 Privilege escalation through SVG navigation Announced March 20, 2015 Reporter Mariusz Mlynski Impact Critical Products Firefox, Firefox ESR, SeaMonkey Fixed in ...

Mozilla Firefox before 3604, Firefox ESR 31x before 3153, and SeaMonkey before 2331 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation ...

CWE-264 https://bugzilla.mozilla.org/show_bug.cgi?id=1144988 http://www.mozilla.org/security/announce/2015/mfsa2015-28.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html http://rhn.redhat.com/errata/RHSA-2015-0718.html http://www.securitytracker.com/id/1031959 http://www.debian.org/security/2015/dsa-3201 http://www.ubuntu.com/usn/USN-2538-1 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html http://www.securityfocus.com/bid/73265 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html https://security.gentoo.org/glsa/201504-01 https://usn.ubuntu.com/2538-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-0818

CVE-2015-0818

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect