CVE-2015-0820 in Firefox
Summary
Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/07/2015
Disclosure
02/25/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69212 | Mozilla Firefox Caja Compiler access control | 284 | Unproven | Official fix | CVE-2015-0820 |