Lucene search

K
cvelistMozillaCVELIST:CVE-2015-0820
HistoryFeb 25, 2015 - 11:00 a.m.

CVE-2015-0820

2015-02-2511:00:00
mozilla
www.cve.org
5

AI Score

9.3

Confidence

High

EPSS

0.004

Percentile

73.4%

Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.

AI Score

9.3

Confidence

High

EPSS

0.004

Percentile

73.4%