NVD

Id
30186  
Name
CVE-2014-1561  
Description
Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-23  
Modified Date
2017-01-06  
Seq
2014-1561  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159524 30186 CVE-2014-1561 59760  View
159525 30186 CVE-2014-1561 60628  View
159526 30186 CVE-2014-1561 http://www.mozilla.org/security/announce/2014/mfsa2014-60.html  View
159527 30186 CVE-2014-1561 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159528 30186 CVE-2014-1561 1030619  View
159529 30186 CVE-2014-1561 https://bugzilla.mozilla.org/show_bug.cgi?id=1000514  View
159530 30186 CVE-2014-1561 https://bugzilla.mozilla.org/show_bug.cgi?id=910375  View
159531 30186 CVE-2014-1561 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14665 JVNDB-2014-003540 Mozilla Firefox における UI アイコンの配置を変更される脆弱性 Mozilla Firefox は、カスタマイズイベントを偽装するドラッグ＆ドロップイベントの使用を適切に制限しないため、UI アイコンの配置を変更される脆弱性が存在します。 CVE-2014-1561 68848 CVE-2014-1561 30186 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003540.html 2014-07-22 2014-07-24 View