CVE-2015-0802

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 67%

from disclosure to weapon145 days

Published on NVDApr 1

1st PoC+145d

metasploitJan 20

exploitation probability

67%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/37958 cve_referencewww.exploit-db.com/exploits/37958/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html https://bugzilla.mozilla.org/show_bug.cgi?id=1124898 https://security.gentoo.org/glsa/201512-10 https://www.exploit-db.com/exploits/37958/http://www.mozilla.org/security/announce/2015/mfsa2015-42.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.securitytracker.com/id/1031996 http://www.ubuntu.com/usn/USN-2550-1