CVE-2015-4516: Mozilla: JavaScript immutable property enforcement can be bypassed (MFSA 2015-109)

Severity: Critical

CVSS Score: 9.3

Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify immutable properties, and consequently execute arbitrary JavaScript code with chrome privileges, via a crafted web page that does not use ES5 APIs.