NVD

Id
30212  
Name
CVE-2014-1589  
Description
Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-11  
Modified Date
2016-12-21  
Seq
2014-1589  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159951 30212 CVE-2014-1589 http://www.mozilla.org/security/announce/2014/mfsa2014-84.html  View
159952 30212 CVE-2014-1589 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
159953 30212 CVE-2014-1589 https://bugzilla.mozilla.org/show_bug.cgi?id=1043787  View
159954 30212 CVE-2014-1589 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17024 JVNDB-2014-005899 Mozilla Firefox および SeaMonkey におけるアクセス制限を回避される脆弱性 Mozilla Firefox および SeaMonkey は、不適切な主要名前空間を持つスタイルシートを提供するため、アクセス制限を回避される脆弱性が存在します。 CVE-2014-1589 68876 CVE-2014-1589 30212 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005899.html 2014-12-02 2014-12-12 View