Lucene search

K
cvelistMozillaCVELIST:CVE-2015-0820
HistoryFeb 25, 2015 - 11:00 a.m.

CVE-2015-0820

2015-02-2511:00:00
mozilla
raw.githubusercontent.com

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.2%

Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.2%