Fluid Attacks Database

Description

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	firefox	<0:31.5.3-1.el5_11	0:31.5.3-1.el5_11
rpm rhel6	firefox	<0:31.5.3-1.el6_6	0:31.5.3-1.el6_6
rpm rhel7	firefox	<0:31.5.3-3.el7_1	0:31.5.3-3.el7_1

Aliases

1. CVE-2015-08182. NVD-2015-08183. OSV-2015-0818

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.