NVD

Id
23241  
Name
CVE-2015-0801  
Description
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-01  
Modified Date
2017-01-02  
Seq
2015-0801  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123210 23241 CVE-2015-0801 openSUSE-SU-2015:0677  View
123211 23241 CVE-2015-0801 SUSE-SU-2015:0704  View
123212 23241 CVE-2015-0801 openSUSE-SU-2015:0892  View
123213 23241 CVE-2015-0801 openSUSE-SU-2015:1266  View
123214 23241 CVE-2015-0801 RHSA-2015:0766  View
123215 23241 CVE-2015-0801 RHSA-2015:0771  View
123216 23241 CVE-2015-0801 DSA-3211  View
123217 23241 CVE-2015-0801 DSA-3212  View
123218 23241 CVE-2015-0801 http://www.mozilla.org/security/announce/2015/mfsa2015-40.html  View
123219 23241 CVE-2015-0801 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
123220 23241 CVE-2015-0801 73455  View
123221 23241 CVE-2015-0801 1031996  View
123222 23241 CVE-2015-0801 1032000  View
123223 23241 CVE-2015-0801 USN-2550-1  View
123224 23241 CVE-2015-0801 USN-2552-1  View
123225 23241 CVE-2015-0801 https://bugzilla.mozilla.org/show_bug.cgi?id=1146339  View
123226 23241 CVE-2015-0801 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6705 JVNDB-2015-002025 Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 Mozilla Firefox および Thunderbird には、同一生成元ポリシーを回避される、およびクローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2015-0801 78012 CVE-2015-0801 23241 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002025.html 2015-03-31 2015-06-19 View