NetSight
IP …
high7.5

CVE-2015-2743

PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allo…

Impact

PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 31.0, 31.1.0, 31.1.1, 31.3.0, 31.5.1, 31.5.2
MozillaFirefox Esr
Versions 31.1, 31.2, 31.3, 31.4, 31.5, 31.6.0
OracleSolaris
Version 11.3
NovellSuse Linux Enterprise Software Development Kit
Version 12.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Server
Versions 11, 12.0

Weakness classification

CWE-17

References