Fluid Attacks Database

Description

A flaw was discovered in Mozilla's PDF.js PDF file viewer. When combined with another vulnerability, it could allow execution of arbitrary code with the privileges of the user running Firefox.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	firefox	<0:38.1.0-1.el5_11	0:38.1.0-1.el5_11
rpm rhel6	firefox	<0:38.1.0-1.el6_6	0:38.1.0-1.el6_6
rpm rhel7	firefox	<0:38.1.0-1.el7_1	0:38.1.0-1.el7_1

Aliases

1. CVE-2015-27432. NVD-2015-27433. OSV-2015-2743

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.