PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2013-10-30T10:00:00
Updated: 2024-08-06T17:15:21.427Z
Reserved: 2013-08-26T00:00:00
Link: CVE-2013-5598
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-10-30T10:55:04.507
Modified: 2017-09-19T01:36:48.687
Link: CVE-2013-5598
Redhat