CVEvulnerability
CVE-2014-1589
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-284
Description
Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.
Affected configurations
• mozilla firefox (<= 33.0)
• mozilla seamonkey (<= 2.30)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.mozilla.org/security/announce/2014/mfsa2014-84.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1043787 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://www.mozilla.org/security/announce/2014/mfsa2014-84.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1043787 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org