NVD

Id
30108  
Name
CVE-2014-1479  
Description
The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remote attackers to bypass intended restrictions on XUL content via vectors involving XBL content scopes.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-02-06  
Modified Date
2016-12-21  
Seq
2014-1479  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158512 30108 CVE-2014-1479 FEDORA-2014-2041  View
158513 30108 CVE-2014-1479 FEDORA-2014-2083  View
158514 30108 CVE-2014-1479 openSUSE-SU-2014:0212  View
158515 30108 CVE-2014-1479 openSUSE-SU-2014:0213  View
158516 30108 CVE-2014-1479 SUSE-SU-2014:0248  View
158517 30108 CVE-2014-1479 openSUSE-SU-2014:0419  View
158518 30108 CVE-2014-1479 RHSA-2014:0132  View
158519 30108 CVE-2014-1479 RHSA-2014:0133  View
158520 30108 CVE-2014-1479 DSA-2858  View
158521 30108 CVE-2014-1479 http://www.mozilla.org/security/announce/2014/mfsa2014-02.html  View
158522 30108 CVE-2014-1479 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
158523 30108 CVE-2014-1479 USN-2102-1  View
158524 30108 CVE-2014-1479 USN-2102-2  View
158525 30108 CVE-2014-1479 USN-2119-1  View
158526 30108 CVE-2014-1479 https://8pecxstudios.com/?page_id=44080  View
158527 30108 CVE-2014-1479 https://bugzilla.mozilla.org/show_bug.cgi?id=911864  View
158528 30108 CVE-2014-1479 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12445 JVNDB-2014-001320 複数の Mozilla 製品の System Only Wrapper の実装における制限を回避される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の System Only Wrapper (SOW) の実装は、特定の複製の操作を適切に制限しないため、XUL コンテンツの制限を回避される脆弱性が存在します。 CVE-2014-1479 68766 CVE-2014-1479 30108 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001320.html 2014-02-04 2014-02-25 View