NetSight
IP …
medium5.0

CVE-2015-7197

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote a…

Impact

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.

Affected products

VendorProductAffected versions
MozillaFirefox
through 41.0.2
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1

Weakness classification

CWE-264

References