NVD

Id
30137  
Name
CVE-2014-1510  
Description
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-03-19  
Modified Date
2016-12-21  
Seq
2014-1510  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
158865 30137 CVE-2014-1510 SUSE-SU-2014:0418  View
158866 30137 CVE-2014-1510 openSUSE-SU-2014:0419  View
158867 30137 CVE-2014-1510 openSUSE-SU-2014:0448  View
158868 30137 CVE-2014-1510 openSUSE-SU-2014:0584  View
158869 30137 CVE-2014-1510 RHSA-2014:0310  View
158870 30137 CVE-2014-1510 RHSA-2014:0316  View
158871 30137 CVE-2014-1510 DSA-2881  View
158872 30137 CVE-2014-1510 http://www.mozilla.org/security/announce/2014/mfsa2014-29.html  View
158873 30137 CVE-2014-1510 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
158874 30137 CVE-2014-1510 66206  View
158875 30137 CVE-2014-1510 USN-2151-1  View
158876 30137 CVE-2014-1510 https://bugzilla.mozilla.org/show_bug.cgi?id=982906  View
158877 30137 CVE-2014-1510 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12857 JVNDB-2014-001732 複数の Mozilla 製品の Web IDL の実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の Web IDL の実装には、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2014-1510 68797 CVE-2014-1510 30137 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001732.html 2014-03-18 2014-04-08 View