Mozilla.Firefox.PDFjs.Same.Origin.Policy.Bypass

Description

This indicates an attack attempt to exploit a Security Bypass vulnerability in Mozilla Firefox.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted JavaScript file. A remote attacker may be able to exploit this to bypass Same Origin Policy via a crafted JavaScript file.

Affected Products

Mozilla Firefox before 39.0.3
Firefox ESR 38.x before 38.1.1
Firefox OS before 2.2

Impact

Security Bypass: Remote attackers can bypass security checks into reading arbitrary files or gain privileges.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/

References