CVE-2015-4519
Published: 22 September 2015
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
firefox Launchpad, Ubuntu, Debian |
precise |
Released
(41.0+build3-0ubuntu0.12.04.1)
|
| trusty |
Released
(41.0+build3-0ubuntu0.14.04.1)
|
|
| upstream |
Released
(41.0)
|
|
| vivid |
Released
(41.0+build3-0ubuntu0.15.04.1)
|
|
|
thunderbird Launchpad, Ubuntu, Debian |
precise |
Released
(1:38.3.0+build1-0ubuntu0.12.04.1)
|
| trusty |
Released
(1:38.3.0+build1-0ubuntu0.14.04.1)
|
|
| upstream |
Released
(38.3.0)
|
|
| vivid |
Released
(1:38.3.0+build1-0ubuntu0.15.04.1)
|