CVE-2015-4495

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.

• CWE-346

• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1581.htmlThird Party Advisory
• http://www.mozilla.org/security/announce/2015/mfsa2015-78.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlPatch, Third Party Advisory
• http://www.securityfocus.com/bid/76249Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033216Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2707-1Third Party Advisory
• https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/Issue Tracking, Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1178058Issue Tracking
• https://bugzilla.mozilla.org/show_bug.cgi?id=1179262Issue Tracking
• https://security.gentoo.org/glsa/201512-10Third Party Advisory
• https://www.exploit-db.com/exploits/37772/Exploit, Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1581.htmlThird Party Advisory
• http://www.mozilla.org/security/announce/2015/mfsa2015-78.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlPatch, Third Party Advisory
• http://www.securityfocus.com/bid/76249Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033216Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2707-1Third Party Advisory
• https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/Issue Tracking, Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1178058Issue Tracking
• https://bugzilla.mozilla.org/show_bug.cgi?id=1179262Issue Tracking
• https://security.gentoo.org/glsa/201512-10Third Party Advisory
• https://www.exploit-db.com/exploits/37772/Exploit, Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4495US Government Resource

Published

Aug 8, 2015

Last Modified

Jun 17, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4489The nsTArray_Impl class in Mozilla Firefox before 40.0, Fire…
• CVE-2015-4490The nsCSPHostSrc::permits function in dom/security/nsCSPUtil…
• CVE-2015-4491Integer overflow in the make_filter_table function in pixops…
• CVE-2015-4492Use-after-free vulnerability in the XMLHttpRequest::Open imp…
• CVE-2015-4493Heap-based buffer overflow in the stagefright::ESDS::parseES…
• CVE-2015-4494Mozilla Firefox OS before 2.2 does not require the wifi-mana…
• CVE-2015-4496Multiple integer overflows in libstagefright in Mozilla Fire…
• CVE-2015-4497Use-after-free vulnerability in the CanvasRenderingContext2D…
• CVE-2015-4498The add-on installation feature in Mozilla Firefox before 40…
• CVE-2015-4499Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x a…
• CVE-2015-4500Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-4501Multiple unspecified vulnerabilities in the browser engine i…