Lucene search
Arch LinuxASA-201508-1HistoryAug 07, 2015 - 12:00 a.m.
firefox: local file stealing via PDF reader
2015-08-0700:00:00
Arch Linux
lists.archlinux.org
23
0.968 High
EPSS
Percentile
99.7%
Security researcher Cody Crews reported on a way to violate the same
origin policy and inject script into a non-privileged part of the
built-in PDF Viewer. This would allow an attacker to read and steal
sensitive local files on the victim’s computer.
Mozilla has received reports that an exploit based on this vulnerability
has been found in the wild.
Related
cve
cve
CVE-2015-4495
2015-08-08 00:59:04
nessus
nessus
Firefox < 39.0.3 PDF Reader Arbitrary File Access
2015-08-07 00:00:00
CentOS 5 / 6 / 7 : firefox (CESA-2015:1581)
2015-08-11 00:00:00
suse
suse
Security update for MozillaFirefox (critical)
2015-08-13 17:09:59
Security update for MozillaFirefox (critical)
2015-08-13 16:09:37
Security update for MozillaFirefox, mozilla-nss (important)
2015-09-10 17:10:07
zdt
zdt
Firefox 39.03 - pdf.js Same Origin Policy Exploit
2015-08-15 00:00:00
veracode
veracode
Same-Origin Policy Bypass
2019-01-15 09:07:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:1380-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2015-0305)
2015-10-15 00:00:00
Mozilla Firefox ESR Security Bypass Vulnerability (Aug 2015) - Mac OS X
2015-08-10 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-08-06 00:00:00
ubuntu
ubuntu
Firefox vulnerability
2015-08-07 00:00:00
prion
prion
Design/Logic Flaw
2015-08-08 00:59:00
kaspersky
kaspersky
centos
centos
firefox security update
2015-08-08 08:45:36
mozilla
mozilla
Same origin violation and local file stealing via PDF reader — Mozilla
2015-08-06 00:00:00
nvd
nvd
CVE-2015-4495
2015-08-08 00:59:04
oraclelinux
oraclelinux
firefox security update
2015-08-08 00:00:00
redhat
redhat
(RHSA-2015:1581) Important: firefox security update
2015-08-07 00:00:00
seebug
seebug
Firefox < 39.0.3 - pdf.js Same Origin Policy Exploit
2015-09-01 00:00:00
ubuntucve
ubuntucve
CVE-2015-4495
2015-08-07 00:00:00
checkpoint_advisories
checkpoint_advisories
mageia
mageia
Updated firefox package fixes CVE-2015-4495
2015-08-07 22:20:18
exploitpack
exploitpack
Mozilla Firefox 39.03 - pdf.js Same Origin Policy
2015-08-15 00:00:00
attackerkb
attackerkb
CVE-2015-4495
2015-08-08 00:00:00
debiancve
debiancve
CVE-2015-4495
2015-08-08 00:59:04
cisa_kev
cisa_kev
Mozilla Firefox Security Feature Bypass Vulnerability
2022-05-25 00:00:00
cvelist
cvelist
CVE-2015-4495
2015-08-08 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_PDFJS_FILEREADER
2015-08-08 00:59:00
exploitdb
exploitdb
Mozilla Firefox < 39.03 - 'pdf.js' Same Origin Policy
2015-08-15 00:00:00
ibm
ibm
securityvulns
securityvulns
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00