NVD

Id
25921  
Name
CVE-2015-4498  
Description
The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-29  
Modified Date
2016-12-21  
Seq
2015-4498  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136866 25921 CVE-2015-4498 SUSE-SU-2015:1504  View
136867 25921 CVE-2015-4498 SUSE-SU-2015:2081  View
136868 25921 CVE-2015-4498 openSUSE-SU-2015:1492  View
136869 25921 CVE-2015-4498 RHSA-2015:1693  View
136870 25921 CVE-2015-4498 DSA-3345  View
136871 25921 CVE-2015-4498 http://www.mozilla.org/security/announce/2015/mfsa2015-95.html  View
136872 25921 CVE-2015-4498 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136873 25921 CVE-2015-4498 76505  View
136874 25921 CVE-2015-4498 1033396  View
136875 25921 CVE-2015-4498 USN-2723-1  View
136876 25921 CVE-2015-4498 https://bugzilla.mozilla.org/show_bug.cgi?id=1042699  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9181 JVNDB-2015-004501 Mozilla Firefox のアドオンのインストール機能におけるユーザ確認の要求を回避される脆弱性 Mozilla Firefox のアドオンのインストール機能には、ユーザ確認の要求を回避される脆弱性が存在します。 CVE-2015-4498 81723 CVE-2015-4498 25921 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004501.html 2015-08-27 2015-09-01 View