CWE Code: 17
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  DEPRECATED: Code
Summary: pdf.js in mozilla firefox before 39.0 and firefox esr 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal workers, which might allow remote attackers to execute arbitrary code by leveraging a same origin policy bypass.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2015-07-06
Last Modified Date: 2016-12-28