← Back

CVE-2015-0798

nvd nist
Published: Apr 8, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.

Affected (2)

Products: Oracle: Solaris · Mozilla: Firefox
Oracle
1 product
Solaris
Mozilla
1 product
Firefox
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Solaris
Version 11.3
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Firefox
Up to 37.0
Running on/withPlatform Versions
Google
Android
All versions

Related CWEs

CWE-264
CWE-264

References (10)

Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Third Party Advisory
Source: security@mozilla.org
Third Party AdvisoryVDB Entry
Source: security@mozilla.org
Issue Tracking
Source: security@mozilla.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.