CVE

Id
68856  
CVE No.
CVE-2014-1561  
Status
Candidate  
Description
Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
662136 68856 CVE-2014-1561 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-60.html  View
662137 68856 CVE-2014-1561 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1000514  View
662138 68856 CVE-2014-1561 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=910375  View
662139 68856 CVE-2014-1561 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
662140 68856 CVE-2014-1561 GENTOO:GLSA-201504-01  View
662141 68856 CVE-2014-1561 URL:https://security.gentoo.org/glsa/201504-01  View
662142 68856 CVE-2014-1561 SECTRACK:1030619  View
662143 68856 CVE-2014-1561 URL:http://www.securitytracker.com/id/1030619  View
662144 68856 CVE-2014-1561 SECUNIA:59760  View
662145 68856 CVE-2014-1561 URL:http://secunia.com/advisories/59760  View
662146 68856 CVE-2014-1561 SECUNIA:60628  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18344 JVNDB-2014-007219 Mozilla Network Security Services におけるデータスマグリング攻撃を実行される脆弱性 Mozilla Network Security Services (NSS) の lib/util/quickder.c の definite_length_decoder 関数は、ASN.1 の長さの DER エンコーディングが適切に形成されているかを確認しないため、データスマグリング攻撃を実行される脆弱性が存在します。 CVE-2014-1569 68856 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007219.html  View