NetSight
IP …
high7.5

CVE-2015-0818

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute …

Impact

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

Affected products

VendorProductAffected versions
MozillaFirefox
through 36.0.3
Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5
MozillaSeamonkey
through 2.33.0

Weakness classification

CWE-264

References