PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2013-10-30T10:00:00
Updated: 2017-09-18T12:57:01
Reserved: 2013-08-26T00:00:00
Link: CVE-2013-5598
JSON object: View
NVD Information
Status : Modified
Published: 2013-10-30T10:55:04.507
Modified: 2017-09-19T01:36:48.687
Link: CVE-2013-5598
JSON object: View
Redhat Information
No data.
CWE