CVE-2014-1489 — Out-of-bounds Write in Mozilla Firefox

CWE-264CWE-787 — Out-of-bounds Write7 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
1.2%
top 20.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Mozilla FirefoxCanonical Ubuntu LinuxOpensuse+5 more
Timeline
PublishedFeb 6
Latest updateMay 14

Description

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages7 packages

▶NVDmozilla/firefox26.0+197
▶NVDoracle/solaris11.3

Also affects: Ubuntu Linux 12.04, 12.10, 13.10

🔴Vulnerability Details

2
GHSA
GHSA-wwpm-rgch-9v66: Mozilla Firefox before 27↗2022-05-14
▶
CVEList
CVE-2014-1489: Mozilla Firefox before 27↗2014-02-06
▶

📋Vendor Advisories

2
Ubuntu
Firefox vulnerabilities↗2014-02-10
▶
Red Hat
Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)↗2014-02-04
▶

💬Community

1
Bugzilla
CVE-2014-1489 Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)↗2014-02-04
▶
CVE-2014-1489 — Out-of-bounds Write in Mozilla Firefox | cvebase