NVD

Id
24744  
Name
CVE-2015-2743  
Description
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-07-05  
Modified Date
2016-12-27  
Seq
2015-2743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130592 24744 CVE-2015-2743 openSUSE-SU-2015:1229  View
130593 24744 CVE-2015-2743 openSUSE-SU-2015:1266  View
130594 24744 CVE-2015-2743 SUSE-SU-2015:1268  View
130595 24744 CVE-2015-2743 SUSE-SU-2015:1269  View
130596 24744 CVE-2015-2743 SUSE-SU-2015:1449  View
130597 24744 CVE-2015-2743 RHSA-2015:1207  View
130598 24744 CVE-2015-2743 DSA-3300  View
130599 24744 CVE-2015-2743 http://www.mozilla.org/security/announce/2015/mfsa2015-69.html  View
130600 24744 CVE-2015-2743 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
130601 24744 CVE-2015-2743 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
130602 24744 CVE-2015-2743 75541  View
130603 24744 CVE-2015-2743 1032783  View
130604 24744 CVE-2015-2743 USN-2656-1  View
130605 24744 CVE-2015-2743 USN-2656-2  View
130606 24744 CVE-2015-2743 https://bugzilla.mozilla.org/show_bug.cgi?id=1163109  View
130607 24744 CVE-2015-2743 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8137 JVNDB-2015-003457 Mozilla Firefox の PDF.js における任意のコードを実行される脆弱性 Mozilla Firefox の PDF.js は、内部ワーカーの高度な特権を有効にするため、任意のコードを実行される脆弱性が存在します。 CVE-2015-2743 79968 CVE-2015-2743 24744 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003457.html 2015-07-02 2015-11-06 View