Lucene search
Mozilla FoundationMFSA2015-69HistoryJul 02, 2015 - 12:00 a.m.
Privilege escalation through internal workers — Mozilla
2015-07-0200:00:00
Mozilla Foundation
www.mozilla.org
16
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.1%
Mozilla community member Jonas Jenwald reported broken behavior in Mozilla’s PDF.js PDF file viewer which led to the discovery that internal Workers were incorrectly executed with high privilege. If this flaw were combined with a separate vulnerability allowing for same-origin policy violation, it could be used to run arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 39 | |
| firefox esr | lt | 31.8 | |
| firefox esr | lt | 38.1 | |
| firefox os | lt | 2.2 |
Related
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-69) - Linux
2021-11-11 00:00:00
Debian Security Advisory DSA 3300-1 (iceweasel - security update)
2015-07-04 00:00:00
Debian: Security Advisory (DSA-3300-1)
2015-07-03 00:00:00
cve
cve
CVE-2015-2743
2015-07-06 02:01:00
ubuntucve
ubuntucve
CVE-2015-2743
2015-07-05 00:00:00
prion
prion
Security feature bypass
2015-07-06 02:01:00
debian
debian
[SECURITY] [DSA 3300-1] iceweasel security update
2015-07-03 22:06:38
nessus
nessus
Debian DSA-3300-1 : iceweasel - security update (Logjam)
2015-07-06 00:00:00
Firefox ESR < 31.8 Multiple Vulnerabilities (Mac OS X) (Logjam)
2015-07-07 00:00:00
Firefox ESR < 31.8 Multiple Vulnerabilities (Logjam)
2015-07-07 00:00:00
osv
osv
iceweasel - security update
2015-07-04 00:00:00
mageia
mageia
Updated firefox package fixes security vulnerability
2015-07-05 20:22:03
veracode
veracode
Buffer Overflow
2019-05-02 05:40:24
Out-of-bounds Read
2019-05-02 05:40:22
Buffer Overflow
2019-05-02 05:40:25
centos
centos
firefox security update
2015-07-06 14:50:33
archlinux
archlinux
firefox: multiple issues
2015-07-03 00:00:00
redhat
redhat
(RHSA-2015:1207) Critical: firefox security update
2015-07-02 00:00:00
suse
suse
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-07-20 11:08:17
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-07-20 12:09:44
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
2015-07-20 12:08:39
oraclelinux
oraclelinux
firefox security update
2015-07-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-07-02 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-07-15 00:00:00
Firefox vulnerabilities
2015-07-09 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-07-13 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.1%
Related for MFSA2015-69