CVE-2013-5598

PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote…

published October 30, 2013

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02937 · 87.0th percentile
Published
2013-10-30T10:00Z
EPSS history
Timeline
  • 30 OCT 10:00Z
    PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote…
    cvelistv5