Published: 16/12/2015 Updated: 30/10/2018

CVSS v2 Base Score: 4 | Impact Score: 4.9 | Exploitability Score: 4.9

VMScore: 356

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N

The WebExtension APIs in Mozilla Firefox prior to 43.0 allow remote malicious users to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fedoraproject fedora 23
fedoraproject fedora 22
mozilla firefox
opensuse leap 42.1
opensuse opensuse 13.2
opensuse opensuse 13.1

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Foundation Security Advisory 2015-148 Privilege escalation vulnerabilities in WebExtension APIs Announced December 15, 2015 Reporter Kris Maglione Impact Critical Products Firefox Fixed in ...

The WebExtension APIs in Mozilla Firefox before 430 allow remote attackers to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site ...

CWE-264 https://bugzilla.mozilla.org/show_bug.cgi?id=1226423 http://www.mozilla.org/security/announce/2015/mfsa2015-148.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html http://www.securityfocus.com/bid/79280 http://www.securitytracker.com/id/1034426 https://security.gentoo.org/glsa/201512-10 http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html http://www.ubuntu.com/usn/USN-2833-1 https://usn.ubuntu.com/2833-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-7223

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-7223

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect