UBUNTU-CVE-2015-0818
- Source
- https://ubuntu.com/security/CVE-2015-0818
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-0818.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-0818
- Upstream
- Downstream
- Related
- Published
- 2015-03-22T00:00:00Z
- Modified
- 2026-04-22T10:01:33.648388Z
- Severity
-
- Ubuntu - medium
- Summary
- [none]
- Details
-
Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
- References
Affected packages
Ubuntu:14.04:LTS / firefox
Package
- Name
- firefox
- Purl
- pkg:deb/ubuntu/firefox@36.0.4+build1-0ubuntu0.14.04.1?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed36.0.4+build1-0ubuntu0.14.04.1
Affected versions
24.*
24.0+build1-0ubuntu1
25.*
25.0+build3-0ubuntu0.13.10.1
28.*
28.0~b2+build1-0ubuntu2
28.0+build1-0ubuntu1
28.0+build2-0ubuntu1
28.0+build2-0ubuntu2
29.*
29.0+build1-0ubuntu0.14.04.2
30.*
30.0+build1-0ubuntu0.14.04.3
31.*
31.0+build1-0ubuntu0.14.04.1
32.*
32.0+build1-0ubuntu0.14.04.1
32.0.3+build1-0ubuntu0.14.04.1
33.*
33.0+build2-0ubuntu0.14.04.1
34.*
34.0+build2-0ubuntu0.14.04.1
35.*
35.0+build3-0ubuntu0.14.04.2
35.0.1+build1-0ubuntu0.14.04.1
36.*
36.0+build2-0ubuntu0.14.04.4
36.0.1+build2-0ubuntu0.14.04.1
Ecosystem specific
{
"binaries": [
{
"binary_version": "36.0.4+build1-0ubuntu0.14.04.1",
"binary_name": "firefox"
},
{
"binary_version": "36.0.4+build1-0ubuntu0.14.04.1",
"binary_name": "firefox-globalmenu"
},
{
"binary_version": "36.0.4+build1-0ubuntu0.14.04.1",
"binary_name": "firefox-mozsymbols"
},
{
"binary_version": "36.0.4+build1-0ubuntu0.14.04.1",
"binary_name": "firefox-testsuite"
}
],
"availability": "No subscription required"
}