CVE-2015-0818

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html
http://rhn.redhat.com/errata/RHSA-2015-0718.html
http://www.debian.org/security/2015/dsa-3201
http://www.mozilla.org/security/announce/2015/mfsa2015-28.html	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
http://www.securityfocus.com/bid/73265
http://www.securitytracker.com/id/1031959
http://www.ubuntu.com/usn/USN-2538-1
https://bugzilla.mozilla.org/show_bug.cgi?id=1144988
https://security.gentoo.org/glsa/201504-01

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:mozilla:firefox_esr:31.0:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.1:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.1.0:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.1.1:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.2:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.3:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.3.0:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.4:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.5:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.5.1:::::::*
	cpe:2.3:a:mozilla:firefox_esr:31.5.2:::::::*
	cpe:2.3:a:mozilla:seamonkey::::::::

History

No history.

Information

Published : 2015-03-24 00:59

Updated : 2016-12-22 02:59

NVD link : CVE-2015-0818

Mitre link : CVE-2015-0818

CVE.ORG link : CVE-2015-0818

JSON object : View

Products Affected

mozilla

seamonkey
firefox
firefox_esr

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-0818", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-03-24T00:59:07.250", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html", "source": "security@mozilla.org"}, {"url": "http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html", "source": "security@mozilla.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2015-0718.html", "source": "security@mozilla.org"}, {"url": "http://www.debian.org/security/2015/dsa-3201", "source": "security@mozilla.org"}, {"url": "http://www.mozilla.org/security/announce/2015/mfsa2015-28.html", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html", "source": "security@mozilla.org"}, {"url": "http://www.securityfocus.com/bid/73265", "source": "security@mozilla.org"}, {"url": "http://www.securitytracker.com/id/1031959", "source": "security@mozilla.org"}, {"url": "http://www.ubuntu.com/usn/USN-2538-1", "source": "security@mozilla.org"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1144988", "source": "security@mozilla.org"}, {"url": "https://security.gentoo.org/glsa/201504-01", "source": "security@mozilla.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation."}, {"lang": "es", "value": "Mozilla Firefox anterior a 36.0.4, Firefox ESR 31.x anterior a 31.5.3, y SeaMonkey anterior a 2.33.1 permiten a atacantes remotos evadir Same Origin Policy y ejecutar c\u00f3digo JavaScript arbitrario con privilegios chrome a trav\u00e9s de vectores que involucran la navegaci\u00f3n por hashes de SVG."}], "lastModified": "2016-12-22T02:59:27.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B58A4E42-C8EB-46D0-BCF0-B39798FFE031", "versionEndIncluding": "36.0.3"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "992DDB6B-F32C-4E80-B386-EB1643D079E4"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D7AAC77-57A3-4747-B760-0EE3CD53E4DE"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19837144-FBCC-4B36-BAF4-FCD9F9C2AAE5"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0DB1BAA-3729-48BD-A8D0-5BBF3D4ABDE6"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DCA6959-24B7-4F86-BE25-0A8A7C1A3D13"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "697EA344-F982-4E9F-9EC8-CCCB5829582B"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C699284-7876-4C8D-B259-B97C60C9A349"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61304847-1DC8-442C-8194-28E52B3C1293"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DF9724E-93B2-4BC7-8181-6D9521A6CC37"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C9244A7-665A-48DE-89C9-C76E7A4556F5"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:31.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E6787E1-0523-49B7-B9B3-74F2D43DB714"}, {"criteria": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E3C8442-7700-43CD-8BC7-6DAE10A77139", "versionEndIncluding": "2.33.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}