NVD

Id
30130  
Name
CVE-2014-1502  
Description
The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-19  
Modified Date
2016-12-21  
Seq
2014-1502  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158803 30130 CVE-2014-1502 SUSE-SU-2014:0418  View
158804 30130 CVE-2014-1502 openSUSE-SU-2014:0419  View
158805 30130 CVE-2014-1502 openSUSE-SU-2014:0448  View
158806 30130 CVE-2014-1502 openSUSE-SU-2014:0584  View
158807 30130 CVE-2014-1502 http://www.mozilla.org/security/announce/2014/mfsa2014-22.html  View
158808 30130 CVE-2014-1502 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
158809 30130 CVE-2014-1502 https://bugzilla.mozilla.org/show_bug.cgi?id=972622  View
158810 30130 CVE-2014-1502 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12864 JVNDB-2014-001739 Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 Mozilla Firefox および SeaMonkey の (1) WebGL.compressedTexImage2D および (2) WebGL.compressedTexSubImage2D 機能における同一生成元ポリシーを回避され、異なるドメインのコンテンツをレンダリングされる脆弱性が存在します。 CVE-2014-1502 68789 CVE-2014-1502 30130 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001739.html 2014-03-18 2014-03-20 View