Unrated severityNVD Advisory· Published Jul 6, 2015· Updated Jun 17, 2026

CVE-2015-2743

Description

PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mozilla Corporation/Firefox17 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=38.1.0
- cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:31.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:31.7.0:*:*:*:*:*:*:*
- (no CPE)range: <39.0; ESR 31.x <31.8; ESR 38.x <38.1
Novell/Suse Linux Enterprise Software Development Kit
cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Desktop
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Server2 versions
cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:novell:suse_linux_enterprise_server:11:sp4:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
Oracle Corporation/Solaris
cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
Mozilla Corporation/Pdf.jsllm-fuzzy
Range: <39.0; ESR 31.x <31.8; ESR 38.x <38.1
osv-coords54 versions
pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed pkg:rpm/suse/firefox-gcc47&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/firefox-gcc47&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/firefox-gcc47&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nspr&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP1-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012
< 128.5.1-1.1+ 53 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 50.1.0-1.1
- (no CPE)range: < 45.5.1-1.1
- (no CPE)range: < 4.7.2_20130108-0.37.2
- (no CPE)range: < 4.7.2_20130108-0.37.2
- (no CPE)range: < 4.7.2_20130108-0.37.2
- (no CPE)range: < 31.0-0.5.7.11
- (no CPE)range: < 31.0-0.5.7.11
- (no CPE)range: < 31.0-0.5.7.11
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 38.2.0esr-10.1
- (no CPE)range: < 38.2.0esr-10.1
- (no CPE)range: < 38.2.0esr-10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-0.10.1
- (no CPE)range: < 31.8.0esr-37.3
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-0.5.1
- (no CPE)range: < 4.10.8-3.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1
- (no CPE)range: < 3.19.2.0-0.7.1
- (no CPE)range: < 3.19.2.0-0.7.1
- (no CPE)range: < 3.19.2.0-0.7.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-0.10.1
- (no CPE)range: < 3.19.2_CKBI_1.98-21.1

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.htmlnvdThird Party Advisory
www.mozilla.org/security/announce/2015/mfsa2015-69.htmlnvdVendor Advisory
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlnvdThird Party Advisory
bugzilla.mozilla.org/show_bug.cginvdIssue Tracking
lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.htmlnvd
lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.htmlnvd
lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.htmlnvd
rhn.redhat.com/errata/RHSA-2015-1207.htmlnvd
www.debian.org/security/2015/dsa-3300nvd
www.securityfocus.com/bid/75541nvd
www.securitytracker.com/id/1032783nvd
www.ubuntu.com/usn/USN-2656-1nvd
www.ubuntu.com/usn/USN-2656-2nvd
security.gentoo.org/glsa/201512-10nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000