Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 权限许可和访问控制漏洞
Vulnerability Description
Mozilla Firefox on Android和Desktop Firefox都是美国Mozilla基金会开发的开源Web浏览器。前者是基于Android平台下使用；后者是一个桌面版。 基于Android平台的Mozilla Firefox 37.0及之前版本和Desktop Firefox预发布版本的Reader模式中存在安全漏洞，该漏洞源于程序没有正确处理URL。远程攻击者可通过绕过同源策略（Same Origin Policy）利用该漏洞以chrome权限执行任意JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A