CVE-2015-2743
Fixed in a distro release EPSS 5%
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
Products: mozilla firefox, mozilla firefox_esr, oracle solaris, novell suse_linux_enterprise_software_development_kit, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | iceweasel | 31.8.0esr-1~deb7u1 |
| Debian 8 | iceweasel | 31.8.0esr-1~deb8u1 |
| Red Hat Enterprise Linux 5 | firefox | 0:38.1.0-1.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.1.0-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.1.0-1.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.1.0-1.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.1.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.1.0-1.el7_1 |
| SUSE Linux Enterprise Desktop 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Desktop 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Desktop 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Server 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Server 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Software Development Kit 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| Ubuntu 14.04 LTS | firefox | 39.0+build5-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |