Lucene search

CVE-2015-4495

🗓️ 08 Aug 2015 00:00:00Reported by AttackerKBType

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows bypassing Same Origin Policy, reading arbitrary files, and gaining privileges via crafted JavaScript code and a native setter, as exploited in August 2015

Reporter	Title	Published	Views	Family All 82
Tenable Nessus	SUSE SLED11 / SLES11 Security Update : MozillaFirefox (SUSE-SU-2015:1380-1)	14 Aug 201500:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS : Firefox vulnerability (USN-2707-1)	10 Aug 201500:00	–	nessus
Tenable Nessus	CentOS 5 / 6 / 7 : firefox (CESA-2015:1581)	11 Aug 201500:00	–	nessus
Tenable Nessus	Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-1581)	10 Aug 201500:00	–	nessus
Tenable Nessus	Firefox < 39.0.3 PDF Reader Arbitrary File Access	7 Aug 201500:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (8eee06d4-c21d-4f07-a669-455151ff426f)	10 Aug 201500:00	–	nessus
Tenable Nessus	Firefox < 39.0.3 PDF Reader Arbitrary File Access (Mac OS X)	7 Aug 201500:00	–	nessus
Tenable Nessus	Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access (Mac OS X)	7 Aug 201500:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2015:1379-1)	14 Aug 201500:00	–	nessus
Tenable Nessus	Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access	7 Aug 201500:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/76249
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
lists	www.lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html
exploit-db	www.exploit-db.com/exploits/37772
rhn	www.rhn.redhat.com/errata/RHSA-2015-1581.html
security	www.security.gentoo.org/glsa/201512-10
lists	www.lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
ubuntu	www.ubuntu.com/usn/USN-2707-1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Aug 2015 00:00Current

1.6Low risk

Vulners AI Score1.6

EPSS0.90466