Skip to content
OpenAdvisories
High 1 exploited CVE USN-2707-1 1 CVE

firefox vulnerability

Published Aug 7, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Cody Crews discovered a way to violate the same-origin policy to inject
script in to a non-privileged part of the PDF viewer. If a user were
tricked in to opening a specially crafted website, an attacker could
exploit this to read sensitive information from local files.
(CVE-2015-4495)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS firefox 39.0.3+build2-0ubuntu0.14.04.1

Vulnerabilities 1

  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022

References

  • report
    https://ubuntu.com/security/CVE-2015-4495