Security bypass in Mozilla products - CVE-2015-4495

Vulnerability identifier: #VU1831

CSH Severity: Critical

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-4495

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerabiity allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to improper input validation. A remote attacker can create a specially crafted PDF file, trick the victim into opening it, bypass same-origin policy and inject arbitrary JavaScript into the built-in PDF Viewer to gain access to arbitrary files on the system.

Successful exploitation of this vulnerability may result in access to local files and privilege escalation, leading to system compromise.

Note: the vulnerability was being actively exploited.

Firefox OS
Mozilla Firefox
Firefox ESR
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
SUSE Linux
Ubuntu
firefox (Alpine package)

Update Mozilla Firefox to version 39.0.3, Mozilla Firefox ESR to version 38.1, Mozilla Firefox OS to version 2.2.

firefox (Alpine package) - update to 38.1.1-r0

• Exploit #14 - Firefox PDF.js Browser File Theft (March 18, 2020)
• Exploit #109 - CVE-2015-4495 (Exploit for CVE-2015-4495 / mfsa2015-78) (March 18, 2020)
• Exploit #627 - Mozilla Firefox < 39.03 - 'pdf.js' Same Origin Policy Exploit (March 18, 2020)

• https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/

• Security bypass in Mozilla Firefox
• Ubuntu update for Firefox
• Arch Linux update for firefox
• SUSE Linux update for MozillaFirefox
• SUSE Linux update for MozillaFirefox
• Red Hat update for firefox
• Security bypass in firefox (Alpine package)