<commit_before>---
announced: July 2, 2015
fixed_in:
- Firefox 39
- Firefox ESR 31.8
- Firefox ESR 38.1
impact: High
reporter: <NAME>
title: Privilege escalation in PDF.js
---

<h3>Description</h3>

<p>Mozilla community member <strong><NAME></strong> reported broken behavior in Mozilla's <code>PDF.js</code> PDF file viewer which led to the discovery that internal Workers were incorrectly executed with high privilege. If this flaw were combined with a separate vulnerability allowing for same-origin policy violation, it could be used to run arbitrary code.
</p>

<h3>References</h3>

<ul>
  <li><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1163109">
        Privilege escalation in PDF.js</a>
(<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2743"
class="ex-ref">CVE-2015-2743</a>)</li>
</ul>


<commit_msg>Changing 2015-69 description and title<commit_after>---
announced: July 2, 2015
fixed_in:
- Firefox 39
- Firefox ESR 31.8
- Firefox ESR 38.1
impact: High
reporter: <NAME>
title: Privilege escalation through internal workers
---

<h3>Description</h3>

<p>Mozilla community member <strong><NAME></strong> reported broken behavior in Mozilla's <code>PDF.js</code> PDF file viewer which led to the discovery that internal Workers were incorrectly executed with high privilege. If this flaw were combined with a separate vulnerability allowing for same-origin policy violation, it could be used to run arbitrary code.
</p>

<h3>References</h3>

<ul>
  <li><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1163109">
        Privilege escalation through internal workers</a>
(<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2743"
class="ex-ref">CVE-2015-2743</a>)</li>
</ul>



{'fraction_non_alphanumeric': 0.13028372900984367, 'fraction_numerical': 0.049797336421540245, 'mean_word_length': 4.6103896103896105, 'pattern_counts': {'":': 0, '<': 43, '<?xml version=': 0, '>': 43, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7458827', 'n_tokens_mistral': 653, 'n_tokens_neox': 556, 'n_words': 178}