[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-1479Date: (C)2014-02-11   (M)2024-03-27


The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remote attackers to bypass intended restrictions on XUL content via vectors involving XBL content scopes.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: NONEAvailability: NONE
Integrity: HIGH 
Availability: NONE 
  
Reference:
OSVDB-102866
SECTRACK-1029717
SECTRACK-1029720
SECTRACK-1029721
SECUNIA-56706
SECUNIA-56761
SECUNIA-56763
SECUNIA-56767
SECUNIA-56787
SECUNIA-56858
SECUNIA-56888
SECUNIA-56922
BID-65320
DSA-2858
FEDORA-2014-2041
FEDORA-2014-2083
GLSA-201504-01
RHSA-2014:0132
RHSA-2014:0133
SUSE-SU-2014:0248
USN-2102-1
USN-2102-2
USN-2119-1
firefox-cve20141479-sec-bypass(90898)
http://download.novell.com/Download?buildid=VYQsgaFpQ2k
http://download.novell.com/Download?buildid=Y2fux-JW1Qc
http://www.mozilla.org/security/announce/2014/mfsa2014-02.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://8pecxstudios.com/?page_id=44080
https://bugzilla.mozilla.org/show_bug.cgi?id=911864
openSUSE-SU-2014:0212
openSUSE-SU-2014:0213
openSUSE-SU-2014:0419

OVAL    16
oval:org.secpod.oval:def:601211
oval:org.secpod.oval:def:701583
oval:org.secpod.oval:def:501183
oval:org.secpod.oval:def:501182
...

© SecPod Technologies