CVE-2015-0798

The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it…

published April 8, 2015

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02219 · 82.4th percentile
Published
2015-04-08T10:00Z
EPSS history
Timeline
  • 08 APR 10:00Z
    The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it…
    cvelistv5