Published: 06/02/2014 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Mozilla Firefox prior to 27.0 and SeaMonkey prior to 2.24 allow remote malicious users to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle solaris 11.3
canonical ubuntu linux 13.10
canonical ubuntu linux 12.10
canonical ubuntu linux 12.04
mozilla seamonkey
mozilla firefox
suse linux enterprise desktop 11
suse linux enterprise server 11
opensuse opensuse 12.3
suse suse linux enterprise software development kit 11.0
opensuse opensuse 11.4
opensuse opensuse 13.1

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

USN-2102-1 introduced a regression in Firefox ...

Mozilla Foundation Security Advisory 2014-05 Information disclosure with *FromPoint on iframes Announced February 4, 2014 Reporter Jordan Milne Impact Moderate Products Firefox, SeaMonkey Fixed in ...

Mozilla Firefox before 270 and SeaMonkey before 224 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the documentcaretPositionFromPoint and documentelementFromPoint functions ...

CWE-1021 http://www.mozilla.org/security/announce/2014/mfsa2014-05.html https://bugzilla.mozilla.org/show_bug.cgi?id=950427 https://8pecxstudios.com/?page_id=44080 http://secunia.com/advisories/56706 http://www.ubuntu.com/usn/USN-2102-1 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html http://www.ubuntu.com/usn/USN-2102-2 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201504-01 https://exchange.xforce.ibmcloud.com/vulnerabilities/90893 http://www.securitytracker.com/id/1029720 http://www.securitytracker.com/id/1029717 http://www.securityfocus.com/bid/65316 http://secunia.com/advisories/56888 http://secunia.com/advisories/56787 http://secunia.com/advisories/56767 http://osvdb.org/102869 https://usn.ubuntu.com/2102-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-1483

CVE-2014-1483

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect