CVE-2015-4495
Fixed in a distro release ExploitedEPSS 69%CVSS 8.8
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
Products: mozilla firefox, mozilla firefox_os, oracle solaris, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, suse linux_enterprise_debuginfo, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdf.js | 1.1.366+dfsg-1 |
| Debian 13 | pdf.js | 1.1.366+dfsg-1 |
| Debian 14 | pdf.js | 1.1.366+dfsg-1 |
| Red Hat Enterprise Linux 5 | firefox | 0:38.1.1-1.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.1.1-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.1.1-1.el6_7 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.1.1-1.el6_7 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.1.1-1.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.1.1-1.el7_1 |
| SUSE Linux Enterprise Desktop 11 SP3 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Desktop 11 SP3 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Desktop 11 SP3 | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Desktop 11 SP3 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Desktop 11 SP4 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Desktop 11 SP4 | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Desktop 11 SP4 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.8.0esr-40.1 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 38.2.1esr-45.1 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox-branding-SLE | 31.0-14.1 |
| SUSE Linux Enterprise Desktop 12 | mozilla-nss | 3.19.2.0-26.2 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP3 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Server 11 SP3 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Server 11 SP3 | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Server 11 SP3 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 38.2.1esr-45.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.8.0esr-40.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox-branding-SLE | 31.0-14.1 |
| SUSE Linux Enterprise Server 12 | mozilla-nss | 3.19.2.0-26.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox-branding-SLED | 31.0-0.12.51 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 38.2.1esr-45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.8.0esr-40.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox-branding-SLE | 31.0-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nss | 3.19.2.0-26.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 31.8.0esr-0.13.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 38.2.1esr-19.3 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nss | 3.19.2.0-0.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.8.0esr-40.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 38.2.1esr-45.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mozilla-nss | 3.19.2.0-26.2 |
| Ubuntu 14.04 LTS | firefox | 39.0.3+build2-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |