Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-4495HistoryAug 08, 2015 - 12:59 a.m.
CVE-2015-4495
2015-08-0800:59:04
Debian Security Bug Tracker
security-tracker.debian.org
14
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.968 High
EPSS
Percentile
99.7%
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pdf.js | < 1.1.366+dfsg-1 | pdf.js_1.1.366+dfsg-1_all.deb |
| Debian | 11 | all | pdf.js | < 1.1.366+dfsg-1 | pdf.js_1.1.366+dfsg-1_all.deb |
| Debian | 999 | all | pdf.js | < 1.1.366+dfsg-1 | pdf.js_1.1.366+dfsg-1_all.deb |
| Debian | 13 | all | pdf.js | < 1.1.366+dfsg-1 | pdf.js_1.1.366+dfsg-1_all.deb |
Related
cve
cve
CVE-2015-4495
2015-08-08 00:59:04
nessus
nessus
Firefox < 39.0.3 PDF Reader Arbitrary File Access
2015-08-07 00:00:00
CentOS 5 / 6 / 7 : firefox (CESA-2015:1581)
2015-08-11 00:00:00
suse
suse
Security update for MozillaFirefox (critical)
2015-08-13 17:09:59
Security update for MozillaFirefox (critical)
2015-08-13 16:09:37
Security update for MozillaFirefox, mozilla-nss (important)
2015-09-10 17:10:07
zdt
zdt
Firefox 39.03 - pdf.js Same Origin Policy Exploit
2015-08-15 00:00:00
veracode
veracode
Same-Origin Policy Bypass
2019-01-15 09:07:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:1380-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2015-0305)
2015-10-15 00:00:00
Mozilla Firefox ESR Security Bypass Vulnerability (Aug 2015) - Mac OS X
2015-08-10 00:00:00
archlinux
archlinux
firefox: local file stealing via PDF reader
2015-08-07 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-08-06 00:00:00
ubuntu
ubuntu
Firefox vulnerability
2015-08-07 00:00:00
prion
prion
Design/Logic Flaw
2015-08-08 00:59:00
kaspersky
kaspersky
centos
centos
firefox security update
2015-08-08 08:45:36
mozilla
mozilla
Same origin violation and local file stealing via PDF reader — Mozilla
2015-08-06 00:00:00
nvd
nvd
CVE-2015-4495
2015-08-08 00:59:04
oraclelinux
oraclelinux
firefox security update
2015-08-08 00:00:00
exploitpack
exploitpack
Mozilla Firefox 39.03 - pdf.js Same Origin Policy
2015-08-15 00:00:00
attackerkb
attackerkb
CVE-2015-4495
2015-08-08 00:00:00
cisa_kev
cisa_kev
Mozilla Firefox Security Feature Bypass Vulnerability
2022-05-25 00:00:00
cvelist
cvelist
CVE-2015-4495
2015-08-08 00:00:00
canvas
canvas
Immunity Canvas: FIREFOX_PDFJS_FILEREADER
2015-08-08 00:59:00
redhat
redhat
(RHSA-2015:1581) Important: firefox security update
2015-08-07 00:00:00
seebug
seebug
Firefox < 39.0.3 - pdf.js Same Origin Policy Exploit
2015-09-01 00:00:00
ubuntucve
ubuntucve
CVE-2015-4495
2015-08-07 00:00:00
checkpoint_advisories
checkpoint_advisories
mageia
mageia
Updated firefox package fixes CVE-2015-4495
2015-08-07 22:20:18
exploitdb
exploitdb
Mozilla Firefox < 39.03 - 'pdf.js' Same Origin Policy
2015-08-15 00:00:00
ibm
ibm
securityvulns
securityvulns
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.968 High
EPSS
Percentile
99.7%
Related for DEBIANCVE:CVE-2015-4495