CVE-2015-0802 Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScri...
MediumCVSS 5.0
EPSS 65.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| mozilla Firefox | <= 36.0.4 | No fix listed |
References
- openSUSE-SU-2015:0677 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 1031996 vdb-entry
- USN-2550-1 vendor-advisory
- bugzilla.mozilla.org
- GLSA-201512-10 vendor-advisory
- 37958 exploit