Published: 06/02/2014 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The Web workers implementation in Mozilla Firefox prior to 27.0, Firefox ESR 24.x prior to 24.3, Thunderbird prior to 24.3, and SeaMonkey prior to 2.24 allows remote malicious users to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla seamonkey
mozilla firefox
mozilla firefox esr
mozilla thunderbird
fedoraproject fedora 20
fedoraproject fedora 19
opensuse opensuse 12.3
suse suse linux enterprise software development kit 11.0
opensuse opensuse 11.4
opensuse opensuse 13.1
suse suse linux enterprise desktop 11
suse suse linux enterprise server 11
canonical ubuntu linux 13.10
canonical ubuntu linux 12.10
canonical ubuntu linux 12.04
debian debian linux 7.0
redhat enterprise linux server 5.0
redhat enterprise linux server eus 6.5
redhat enterprise linux workstation 5.0
redhat enterprise linux server aus 6.5
redhat enterprise linux server tus 6.5
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux desktop 5.0
redhat enterprise linux eus 6.5

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix several security issues are now availablefor Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulner ...

Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as havingimportant security impact ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Several security issues were fixed in Thunderbird ...

USN-2102-1 introduced a regression in Firefox ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, too-verbose error messages and missing permission checks may lead to the execution of arbitrary code, the bypass of security checks or information disclosure This update also addresses security ...

Mozilla Foundation Security Advisory 2014-09 Cross-origin information leak through web workers Announced February 4, 2014 Reporter Masato Kinugawa Impact High Products Firefox, Firefox ESR, SeaMonkey, Thunderbird Fixed ...

The Web workers implementation in Mozilla Firefox before 270, Firefox ESR 24x before 243, Thunderbird before 243, and SeaMonkey before 224 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages ...

CWE-346 http://www.mozilla.org/security/announce/2014/mfsa2014-09.html https://bugzilla.mozilla.org/show_bug.cgi?id=947592 http://rhn.redhat.com/errata/RHSA-2014-0132.html https://8pecxstudios.com/?page_id=44080 http://rhn.redhat.com/errata/RHSA-2014-0133.html http://secunia.com/advisories/56706 http://www.ubuntu.com/usn/USN-2102-1 http://www.debian.org/security/2014/dsa-2858 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html http://www.ubuntu.com/usn/USN-2119-1 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html http://www.ubuntu.com/usn/USN-2102-2 http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201504-01 https://exchange.xforce.ibmcloud.com/vulnerabilities/90889 http://www.securitytracker.com/id/1029721 http://www.securitytracker.com/id/1029720 http://www.securitytracker.com/id/1029717 http://www.securityfocus.com/bid/65330 http://secunia.com/advisories/56922 http://secunia.com/advisories/56888 http://secunia.com/advisories/56858 http://secunia.com/advisories/56787 http://secunia.com/advisories/56767 http://secunia.com/advisories/56763 http://secunia.com/advisories/56761 http://osvdb.org/102873 http://download.novell.com/Download?buildid=Y2fux-JW1Qc http://download.novell.com/Download?buildid=VYQsgaFpQ2k https://access.redhat.com/errata/RHSA-2014:0132 https://nvd.nist.gov https://usn.ubuntu.com/2102-1/

CVE-2014-1487

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect