PT-2015-4887
CVE-2015-0818
·
تاريخ النشر
2015-03-20
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 36.0.4
Firefox ESR versions prior to 31.5.3
SeaMonkey versions prior to 2.33.1
Description
The issue allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
Recommendations
For Mozilla Firefox versions prior to 36.0.4, update to version 36.0.4 or later.
For Firefox ESR versions prior to 31.5.3, update to version 31.5.3 or later.
For SeaMonkey versions prior to 2.33.1, update to version 2.33.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾