CVEvulnerability
CVE-2014-8632
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-284
Description
The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.
Affected configurations
• mozilla firefox (<= 33.0)
• mozilla seamonkey (<= 2.30)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.mozilla.org/security/announce/2014/mfsa2014-91.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1050340 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://www.mozilla.org/security/announce/2014/mfsa2014-91.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=1050340 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org