CVE

Id
78065  
CVE No.
CVE-2015-0802  
Status
Candidate  
Description
Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714011 78065 CVE-2015-0802 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-42.html  View
714012 78065 CVE-2015-0802 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1124898  View
714013 78065 CVE-2015-0802 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714014 78065 CVE-2015-0802 GENTOO:GLSA-201512-10  View
714015 78065 CVE-2015-0802 URL:https://security.gentoo.org/glsa/201512-10  View
714016 78065 CVE-2015-0802 SUSE:openSUSE-SU-2015:0677  View
714017 78065 CVE-2015-0802 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html  View
714018 78065 CVE-2015-0802 UBUNTU:USN-2550-1  View
714019 78065 CVE-2015-0802 URL:http://www.ubuntu.com/usn/USN-2550-1  View
714020 78065 CVE-2015-0802 SECTRACK:1031996  View

Related JVN