CVE-2015-0820

LOW 2.6CVE-2015-0820 · Published 25/02/2015 · updated 17/06/2026

In short

CVE-2015-0820 is a LOW (CVSS 2.6) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`= 0.1= 0.10= 0.10.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.6.1= 0.7= 0.7.1= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.4.1= 1.5= 1.5.0.1= 1.5.0.10= 1.5.0.11= 1.5.0.12= 1.5.0.2= 1.5.0.3= 1.5.0.4= 1.5.0.5= 1.5.0.6= 1.5.0.7= 1.5.0.8= 1.5.0.9= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.8= 10.0= 10.0.1= 10.0.10= 10.0.11= 10.0.12= 10.0.2= 10.0.3= 10.0.4= 10.0.5= 10.0.6= 10.0.7= 10.0.8= 10.0.9= 11.0= 12.0= 13.0= 13.0.1= 14.0= 14.0.1= 15.0= 15.0.1= 16.0= 16.0.1= 16.0.2= 17.0= 17.0.1= 17.0.10= 17.0.11= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6= 17.0.7= 17.0.8= 17.0.9= 18.0= 18.0.1= 18.0.2= 19.0= 19.0.1= 19.0.2= 2.0= 2.0.0.1= 2.0.0.10= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.15= 2.0.0.16= 2.0.0.17= 2.0.0.18= 2.0.0.19= 2.0.0.2= 2.0.0.20= 2.0.0.3= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.7= 2.0.0.8= 2.0.0.9= 20.0= 20.0.1= 21.0= 22.0= 23.0= 23.0.1= 24.0= 24.1= 24.1.1= 25.0= 25.0.1= 26.0= 27.0= 27.0.1= 28.0= 29.0= 29.0.1= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.5= 3.5.1= 3.5.10= 3.5.11= 3.5.12= 3.5.13= 3.5.14= 3.5.15= 3.5.16= 3.5.17= 3.5.18= 3.5.19= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9= 3.6= 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.14= 3.6.15= 3.6.16= 3.6.17= 3.6.18= 3.6.19= 3.6.2= 3.6.20= 3.6.21= 3.6.22= 3.6.23= 3.6.24= 3.6.25= 3.6.26= 3.6.27= 3.6.28= 3.6.3= 3.6.4= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 30.0= 31.0= 31.1.0= 32.0= 33.0= 34.0.5= 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1= 8.0= 8.0.1= 9.0= 9.0.1≤ 35.0.1`	No fix yet

Description

Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.

References

lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html · Third Party Advisory
lists.opensuse.org/opensuse-updates/2015-03/msg00067.html · Third Party Advisory
mozilla.org/security/announce/2015/mfsa2015-27.html · Vendor Advisory
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
securityfocus.com/bid/72757 · Third Party Advisory
ubuntu.com/usn/USN-2505-1 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/201504-01

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

= 0.1= 0.10= 0.10.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.6.1= 0.7= 0.7.1= 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.4.1= 1.5= 1.5.0.1= 1.5.0.10= 1.5.0.11= 1.5.0.12= 1.5.0.2= 1.5.0.3= 1.5.0.4= 1.5.0.5= 1.5.0.6= 1.5.0.7= 1.5.0.8= 1.5.0.9= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.8= 10.0= 10.0.1= 10.0.10= 10.0.11= 10.0.12= 10.0.2= 10.0.3= 10.0.4= 10.0.5= 10.0.6= 10.0.7= 10.0.8= 10.0.9= 11.0= 12.0= 13.0= 13.0.1= 14.0= 14.0.1= 15.0= 15.0.1= 16.0= 16.0.1= 16.0.2= 17.0= 17.0.1= 17.0.10= 17.0.11= 17.0.2= 17.0.3= 17.0.4= 17.0.5= 17.0.6= 17.0.7= 17.0.8= 17.0.9= 18.0= 18.0.1= 18.0.2= 19.0= 19.0.1= 19.0.2= 2.0= 2.0.0.1= 2.0.0.10= 2.0.0.11= 2.0.0.12= 2.0.0.13= 2.0.0.14= 2.0.0.15= 2.0.0.16= 2.0.0.17= 2.0.0.18= 2.0.0.19= 2.0.0.2= 2.0.0.20= 2.0.0.3= 2.0.0.4= 2.0.0.5= 2.0.0.6= 2.0.0.7= 2.0.0.8= 2.0.0.9= 20.0= 20.0.1= 21.0= 22.0= 23.0= 23.0.1= 24.0= 24.1= 24.1.1= 25.0= 25.0.1= 26.0= 27.0= 27.0.1= 28.0= 29.0= 29.0.1= 3.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.3= 3.0.4= 3.0.5= 3.0.6= 3.0.7= 3.0.8= 3.0.9= 3.5= 3.5.1= 3.5.10= 3.5.11= 3.5.12= 3.5.13= 3.5.14= 3.5.15= 3.5.16= 3.5.17= 3.5.18= 3.5.19= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.5.8= 3.5.9= 3.6= 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.14= 3.6.15= 3.6.16= 3.6.17= 3.6.18= 3.6.19= 3.6.2= 3.6.20= 3.6.21= 3.6.22= 3.6.23= 3.6.24= 3.6.25= 3.6.26= 3.6.27= 3.6.28= 3.6.3= 3.6.4= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 30.0= 31.0= 31.1.0= 32.0= 33.0= 34.0.5= 4.0= 4.0.1= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 7.0= 7.0.1= 8.0= 8.0.1= 9.0= 9.0.1≤ 35.0.1

No fix yet

Description

More vulnerabilities in firefox

See all →