CVEvulnerability

CVE-2015-0818

7.5 HIGH Published 2015-03-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

Affected configurations

• mozilla firefox (<= 36.0.3) • mozilla firefox 31.0 • mozilla firefox 31.1.0 • mozilla firefox 31.1.1 • mozilla firefox 31.3.0 • mozilla firefox 31.5.1 • mozilla firefox 31.5.2 • mozilla firefox esr 31.1 • mozilla firefox esr 31.2 • mozilla firefox esr 31.3 • mozilla firefox esr 31.4 • mozilla firefox esr 31.5 • mozilla seamonkey (<= 2.33.0)

Related

Weakness · not in database (1)

References