CVE-2015-2718
Publication date 13 May 2015
Last updated 24 July 2024
Ubuntu priority
Description
The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| firefox | ||
| 14.04 LTS trusty |
Fixed in 38.0+build3-0ubuntu0.14.04.1
|
|
References
Related Ubuntu Security Notices (USN)
- USN-2602-1
- Firefox vulnerabilities
- 13 May 2015