CVE-2014-1526

EUVD-2014-1602
The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 29.0
mozillaseamonkey
𝑥
< 2.26
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
opensuseopensuse
12.3
opensuseopensuse
13.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
lucid
ignored
precise
Fixed 29.0+build1-0ubuntu0.12.04.2
released
quantal
Fixed 29.0+build1-0ubuntu0.12.10.3
released
saucy
Fixed 29.0+build1-0ubuntu0.13.10.3
released
trusty
Fixed 29.0+build1-0ubuntu0.14.04.2
released
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
http://secunia.com/advisories/59866
http://www.mozilla.org/security/announce/2014/mfsa2014-47.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1030163
http://www.securitytracker.com/id/1030164
http://www.ubuntu.com/usn/USN-2185-1
https://bugzilla.mozilla.org/show_bug.cgi?id=988106
https://security.gentoo.org/glsa/201504-01
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
http://secunia.com/advisories/59866
http://www.mozilla.org/security/announce/2014/mfsa2014-47.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securitytracker.com/id/1030163
http://www.securitytracker.com/id/1030164
http://www.ubuntu.com/usn/USN-2185-1
https://bugzilla.mozilla.org/show_bug.cgi?id=988106
https://security.gentoo.org/glsa/201504-01