CVE-2015-0802

EPSS 67.3%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 67.3%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

20 Jan 2014Metasploit module available

01 Apr 2015Published on NVD

24 Aug 2015Public PoC

Weaponization speed

145 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/37958/unverified exploitdbwww.exploit-db.com/exploits/37958unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html https://bugzilla.mozilla.org/show_bug.cgi?id=1124898 https://security.gentoo.org/glsa/201512-10 https://www.exploit-db.com/exploits/37958/http://www.mozilla.org/security/announce/2015/mfsa2015-42.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.securitytracker.com/id/1031996 http://www.ubuntu.com/usn/USN-2550-1