Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

UBUNTU-CVE-2015-2727 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceUBUNTU-CVE-2015-2727

UBUNTU-CVE-2015-2727

MEDIUM5.5

Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is access

Published Jul 5, 2015

Modified 6 months ago

Fix available

Details

Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions. NOTE: this vulnerability exists because of a CVE-2015-0821 regression.

Affected Packages

firefox

Ubuntu 14.04 LTS

Fixed in:

39.0+build5-0ubuntu0.14.04.1

References

http://www.mozilla.org/security/announce/2015/mfsa2015-60.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1163422

https://ubuntu.com/security/CVE-2015-2727

https://ubuntu.com/security/notices/USN-2656-1

https://ubuntu.com/security/notices/USN-2656-2

https://www.cve.org/CVERecord?id=CVE-2015-2727

https://www.mozilla.org/en-US/security/advisories/mfsa2015-60/

Upstream

Related

USN-2656-1 USN-2656-2

Ecosystems

Ubuntu 14.04 LTS

Timeline

PublishedJul 5, 2015

ModifiedSep 8, 2025