CVE:CVE-2015-4495
CNNVD:CNNVD-201508-043
Mozilla Firefox、Firefox ESR和Firefox OS都是由美国Mozilla基金会开发。Firefox是一款开源Web浏览器；Firefox ESR是Firefox的一个延长支持版本；Firefox OS是一套基于Linux内核并应用于智能手机和平板电脑中的移动操作系统。
多款Mozilla产品中的PDF阅读器存在安全漏洞。远程攻击者可借助特制的JavaScript代码和本机调节器利用该漏洞绕过同源策略，读取任意文件或获取权限。以下产品及版本受到影响：Mozilla Firefox 39.0.3之前版本，Firefox ESR Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2之前38.x版本，Firefox OS 2.2之前版本。说明：该漏洞在2015年8月被广泛利用。
solution:Upgrade mozilla firefox to a higher version than 39.0,and avoid the version (,39.0]; Upgrade mozilla firefox_esr to a higher version than 38.0,38.0.1,38.0.5,38.1.0,and avoid the version 38.0,38.0.1,38.0.5,38.1.0; Upgrade mozilla firefox_os to a higher version than 2.1.0,and avoid the version (,2.1.0]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade novell suse_linux_enterprise_desktop to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_server to a higher version than 12.0,and avoid the version 12.0; Upgrade novell suse_linux_enterprise_software_development_kit to a higher version than 12.0,and avoid the version 12.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3