PT-2015-4889 · Mozilla+3 · Firefox+3

Jan De Mooij + 1 · Publicado 2015-02-24 · Atualizado 2024-12-12 · CVE-2015-0820

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0

Description The issue is related to the improper restriction of transitions of JavaScript objects from a non-extensible state to an extensible state. This allows remote attackers to bypass sandbox protection mechanisms via a crafted web site.

Recommendations For versions prior to 36.0, update to version 36.0 or later to resolve the issue.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2015-1275

ALT-PU-2015-1464

CVE-2015-0820

MGASA-2015-0126

OPENSUSE-SU-2015_0404-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

USN-2505-1

USN-2505-2

Produtos afetados

Alt Linux

Firefox

Suse

Ubuntu

Referências · 2247

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• https://suse.com/security/cve/CVE-2009-0354 · Nota
• https://bdu.fstec.ru/vul/2015-09904 · Nota de Segurança
• https://suse.com/security/cve/CVE-2024-3302 · Nota
• https://mozilla.org/en-US/security/advisories/mfsa2015-28 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-1551 · Nota
• https://suse.com/security/cve/CVE-2012-1937 · Nota
• https://suse.com/security/cve/CVE-2023-25731 · Nota
• https://suse.com/security/cve/CVE-2009-1307 · Nota
• https://suse.com/security/cve/CVE-2020-6812 · Nota
• https://suse.com/security/cve/CVE-2024-4769 · Nota
• https://suse.com/security/cve/CVE-2016-5282 · Nota
• https://suse.com/security/cve/CVE-2010-1210 · Nota
• https://suse.com/security/cve/CVE-2009-3381 · Nota