CVE

Id
78083  
CVE No.
CVE-2015-0820  
Status
Candidate  
Description
Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714300 78083 CVE-2015-0820 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-27.html  View
714301 78083 CVE-2015-0820 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1125389  View
714302 78083 CVE-2015-0820 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714303 78083 CVE-2015-0820 GENTOO:GLSA-201504-01  View
714304 78083 CVE-2015-0820 URL:https://security.gentoo.org/glsa/201504-01  View
714305 78083 CVE-2015-0820 SUSE:openSUSE-SU-2015:0404  View
714306 78083 CVE-2015-0820 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html  View
714307 78083 CVE-2015-0820 SUSE:openSUSE-SU-2015:0570  View
714308 78083 CVE-2015-0820 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html  View
714309 78083 CVE-2015-0820 UBUNTU:USN-2505-1  View
714310 78083 CVE-2015-0820 URL:http://www.ubuntu.com/usn/USN-2505-1  View
714311 78083 CVE-2015-0820 BID:72757  View

Related JVN