CVE-2015-0818

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0.4 Firefox ESR versions prior to 31.5.3 SeaMonkey versions prior to 2.33.1

Description The issue allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

Recommendations For Mozilla Firefox versions prior to 36.0.4, update to version 36.0.4 or later. For Firefox ESR versions prior to 31.5.3, update to version 31.5.3 or later. For SeaMonkey versions prior to 2.33.1, update to version 2.33.1 or later.