Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-4495

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.863
EPSS Ranking 99.3%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.3
Proposed Action
Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.
Ransomware Campaign
Unknown
References
Products affected by CVE-2015-4495


Contact Us

Shodan ® - All rights reserved