NVD

Id
25918  
Name
CVE-2015-4495  
Description
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-08-07  
Modified Date
2016-12-23  
Seq
2015-4495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136833 25918 CVE-2015-4495 SUSE-SU-2015:1379  View
136834 25918 CVE-2015-4495 SUSE-SU-2015:1380  View
136835 25918 CVE-2015-4495 openSUSE-SU-2015:1389  View
136836 25918 CVE-2015-4495 openSUSE-SU-2015:1390  View
136837 25918 CVE-2015-4495 SUSE-SU-2015:1449  View
136838 25918 CVE-2015-4495 SUSE-SU-2015:1528  View
136839 25918 CVE-2015-4495 RHSA-2015:1581  View
136840 25918 CVE-2015-4495 http://www.mozilla.org/security/announce/2015/mfsa2015-78.html  View
136841 25918 CVE-2015-4495 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136842 25918 CVE-2015-4495 76249  View
136843 25918 CVE-2015-4495 1033216  View
136844 25918 CVE-2015-4495 USN-2707-1  View
136845 25918 CVE-2015-4495 https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/  View
136846 25918 CVE-2015-4495 https://bugzilla.mozilla.org/show_bug.cgi?id=1178058  View
136847 25918 CVE-2015-4495 https://bugzilla.mozilla.org/show_bug.cgi?id=1179262  View
136848 25918 CVE-2015-4495 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8706 JVNDB-2015-004026 Mozilla Firefox および Firefox OS の PDF リーダーにおける同一生成元ポリシーを回避される脆弱性 Mozilla Firefox および Firefox OS の PDF リーダーには、同一生成元ポリシーを回避され、任意のファイルを読まれる、または権限を取得される脆弱性が存在します。 CVE-2015-4495 81720 CVE-2015-4495 25918 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004026.html 2015-08-06 2015-09-03 View