NVD

Id
35637  
Name
CVE-2014-8636  
Description
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-14  
Modified Date
2017-01-02  
Seq
2014-8636  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182450 35637 CVE-2014-8636 openSUSE-SU-2015:0077  View
182451 35637 CVE-2014-8636 SUSE-SU-2015:0171  View
182452 35637 CVE-2014-8636 SUSE-SU-2015:0173  View
182453 35637 CVE-2014-8636 SUSE-SU-2015:0180  View
182454 35637 CVE-2014-8636 openSUSE-SU-2015:0192  View
182455 35637 CVE-2014-8636 http://packetstormsecurity.com/files/130972/Firefox-Proxy-Prototype-Privileged-Javascript-Injection.html  View
182456 35637 CVE-2014-8636 62418  View
182457 35637 CVE-2014-8636 http://www.mozilla.org/security/announce/2014/mfsa2015-09.html  View
182458 35637 CVE-2014-8636 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
182459 35637 CVE-2014-8636 72041  View
182460 35637 CVE-2014-8636 1031533  View
182461 35637 CVE-2014-8636 firefox-cve20148636-sec-bypass(99964)  View
182462 35637 CVE-2014-8636 https://bugzilla.mozilla.org/show_bug.cgi?id=987794  View
182463 35637 CVE-2014-8636 https://community.rapid7.com/community/metasploit/blog/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636  View
182464 35637 CVE-2014-8636 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18711 JVNDB-2014-007586 Mozilla Firefox および SeaMonkey の XrayWrapper の実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性 Mozilla Firefox および SeaMonkey の XrayWrapper の実装は、getter という名前を持つ DOM オブジェクトとの対話処理を適切に行わないため、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2014-8636 75929 CVE-2014-8636 35637 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007586.html 2014-11-06 2015-01-15 View