CVE

Id
78061  
CVE No.
CVE-2015-0798  
Status
Candidate  
Description
The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
713961 78061 CVE-2015-0798 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-43.html  View
713962 78061 CVE-2015-0798 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1147597  View
713963 78061 CVE-2015-0798 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
713964 78061 CVE-2015-0798 GENTOO:GLSA-201512-10  View
713965 78061 CVE-2015-0798 URL:https://security.gentoo.org/glsa/201512-10  View
713966 78061 CVE-2015-0798 SECTRACK:1032029  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7597 JVNDB-2015-002917 FusionForge 用 Git プラグインにおける任意のコードを実行される脆弱性 FusionForge 用 Git プラグインには、任意のコードを実行される脆弱性が存在します。 CVE-2015-0850 78061 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002917.html  View