CVE-2015-0818
Fixed in a distro release EPSS 3%
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
Products: mozilla firefox, mozilla firefox_esr, mozilla seamonkey
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | iceweasel | 31.5.3esr-1~deb7u1 |
| Red Hat Enterprise Linux 5 | firefox | 0:31.5.3-1.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:31.5.3-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:31.5.3-1.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:31.5.3-1.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:31.5.3-3.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:31.5.3-3.el7_1 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.5.3esr-27.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.5.3esr-27.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.5.3esr-27.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.5.3esr-27.1 |
| Ubuntu 14.04 LTS | firefox | 36.0.4+build1-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |