Published: 23/07/2014 Updated: 07/01/2017

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

Mozilla Firefox prior to 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote malicious users to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
oracle solaris 11.3

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Foundation Security Advisory 2014-60 Toolbar dialog customization event spoofing Announced July 22, 2014 Reporter David Chan, Gijs Kruitbosch Impact Low Products Firefox Fixed in ...

CWE-264 https://bugzilla.mozilla.org/show_bug.cgi?id=1000514 https://bugzilla.mozilla.org/show_bug.cgi?id=910375 http://www.mozilla.org/security/announce/2014/mfsa2014-60.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201504-01 http://www.securitytracker.com/id/1030619 http://secunia.com/advisories/60628 http://secunia.com/advisories/59760 https://usn.ubuntu.com/2295-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-1561

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect