CVE-2015-7214

What is CVE-2015-7214?

Please see the following link.

Cross-site reading attack through data and view-source URIs

Contents

• www/index.html
  • SOP bypass PoC for Web
• local/index.html
  • SOP bypass PoC for local

Requirements

• Firefox version 42.0 or earlier

The following is the download link of Firefox 42.0 for each platform.

• Windows
  • https://ftp.mozilla.org/pub/firefox/releases/42.0/win32/ja/Firefox%20Setup%2042.0.exe
• Mac
  • https://ftp.mozilla.org/pub/firefox/releases/42.0/mac/ja-JP-mac/Firefox%2042.0.dmg
• Linux
  • https://ftp.mozilla.org/pub/firefox/releases/42.0/linux-i686/ja/firefox-42.0.tar.bz2