CVE-2015-0816
NoneCVSS
—
EPSS
65.5%
Published
Apr 1, 2015
CISA due date
—
The record
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:7 | icedove | 0 | 31.6.0-1~deb7u1 |
| Debian:7 | iceweasel | 0 | 31.6.0esr-1~deb7u1 |
| Mageia:4 | firefox | 0 | 31.6.0-1.mga4 |
| Mageia:4 | firefox-l10n | 0 | 31.6.0-1.mga4 |
| Mageia:4 | iceape | 0 | 2.35-1.mga4 |
| Mageia:4 | nss | 0 | 3.18.0-1.1.mga4 |
| Mageia:4 | rootcerts | 0 | 20150326.00-1.mga4 |
| Mageia:4 | thunderbird | 0 | 31.6.0-1.mga4 |
| Mageia:4 | thunderbird-l10n | 0 | 31.6.0-1.mga4 |
| Mageia:5 | iceape | 0 | 2.35-1.mga5 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:31.6.0-2.el5_11 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:31.6.0-2.el5_11 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:31.6.0-1.el5_11 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:31.6.0-1.el5_11 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:31.6.0-2.el5_11 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:31.6.0-2.el5_11 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:31.6.0-1.el6_6 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:31.6.0-1.el6_6 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:31.6.0-1.el6_6 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:31.6.0-1.el6_6 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:31.6.0-2.el6_6 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:31.6.0-1.el6_6 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:31.6.0-1.el6_6 |
| Red Hat:enterprise_linux:7::client | firefox | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::client | firefox-debuginfo | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::client | thunderbird | 0 | 0:31.6.0-1.el7_1 |
| Red Hat:enterprise_linux:7::client | thunderbird-debuginfo | 0 | 0:31.6.0-1.el7_1 |
| Red Hat:enterprise_linux:7::client | xulrunner | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::client | xulrunner-debuginfo | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::client | xulrunner-devel | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::computenode | xulrunner | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::computenode | xulrunner-debuginfo | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::computenode | xulrunner-devel | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::server | firefox | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::server | firefox-debuginfo | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::server | thunderbird | 0 | 0:31.6.0-1.ael7b_1 |
| Red Hat:enterprise_linux:7::server | thunderbird-debuginfo | 0 | 0:31.6.0-1.ael7b_1 |
| Red Hat:enterprise_linux:7::server | xulrunner | 0 | 0:31.6.0-2.ael7b_1 |
| Red Hat:enterprise_linux:7::server | xulrunner-debuginfo | 0 | 0:31.6.0-2.ael7b_1 |
| Red Hat:enterprise_linux:7::server | xulrunner-devel | 0 | 0:31.6.0-2.ael7b_1 |
| Red Hat:enterprise_linux:7::workstation | firefox | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | firefox-debuginfo | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | thunderbird | 0 | 0:31.6.0-1.el7_1 |
| Red Hat:enterprise_linux:7::workstation | thunderbird-debuginfo | 0 | 0:31.6.0-1.el7_1 |
| Red Hat:enterprise_linux:7::workstation | xulrunner | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | xulrunner-debuginfo | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:enterprise_linux:7::workstation | xulrunner-devel | 0 | 0:31.6.0-2.el7_1 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:31.6.0-1.el5_11 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:31.6.0-1.el5_11 |
| SUSE:Linux Enterprise Desktop 12 | MozillaFirefox | 0 | 31.6.0esr-30.1 |
| SUSE:Linux Enterprise Server 12 | MozillaFirefox | 0 | 31.6.0esr-30.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 0 | 31.6.0esr-30.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | MozillaFirefox | 0 | 31.6.0esr-30.1 |
| Ubuntu:14.04:LTS | firefox | 0 | 37.0+build2-0ubuntu0.14.04.1 |
| Ubuntu:14.04:LTS | thunderbird | 0 | 1:31.6.0+build1-0ubuntu0.14.04.1 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2017-7753 An out-of-bounds read occurs when applying style rules to pseudo-elements, such as… Also affects icedove
- CVE-2017-5470 Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Also affects icedove
- CVE-2017-5404 A use-after-free error can occur when manipulating ranges in selections with one node… Also affects icedove
- CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Also affects icedove
- CVE-2016-9899 Use-after-free while manipulating DOM events and removing audio elements due to errors in… Also affects icedove
- CVE-2017-5375 JIT code allocation can allow for a bypass of ASLR and DEP protections leading to… Also affects icedove
- CVE-2017-5373 Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Also affects icedove
- CVE-2016-9893 Memory safety bugs were reported in Thunderbird 45.5. Also affects icedove