| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 4.6 | $0-$5k | 0.00 |
A vulnerability classified as problematic has been found in Mozilla Firefox 27.0 (Web Browser). Affected is an unknown code block of the file content/canvas/src/WebGLContextGL.cpp of the component WebGL Handler. The manipulation with an unknown input leads to a access control vulnerability. CWE is classifying the issue as CWE-264. This is going to have an impact on integrity. CVE summarizes:
The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.
The weakness was shared 03/18/2014 by Jeff Gilbert with OUSPG as MFSA2014-22 as confirmed advisory (Website). The advisory is available at mozilla.org. This vulnerability is traded as CVE-2014-1502 since 01/16/2014. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1068 by the MITRE ATT&CK project. The advisory points out:
[A] malicious site with WebGL content could inject content from its context to that of another site's WebGL context, causing the second site to replace textures and similar content. This cannot be used to steal data but could be used to render arbitrary content in these limited circumstances.
The vulnerability scanner Nessus provides a plugin with the ID 73111 (FreeBSD : mozilla -- multiple vulnerabilities (610de647-af8d-11e3-a25b-b4b52fce4ce8)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family FreeBSD Local Security Checks. The commercial vulnerability scanner Qualys is able to test this issue with plugin 166883 (OpenSuSE Security Update for MozillaFirefox (openSUSE-SU-2014:0448-1)). The advisory illustrates:
In general this flaw cannot be exploited through email in the Seamonkey product because WebGL is not enabled, but is potentially a risk in browser or browser-like contexts.
Upgrading to version 28 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability. The advisory contains the following remark:
Fixed in: Firefox 28, Seamonkey 2.25
The vulnerability is also documented in the databases at X-Force (91863), Tenable (73111), SecurityFocus (BID 66278†), SecurityTracker (ID 1029928†) and Vulnerability Center (SBV-43689†). Further details are available at bugzilla.mozilla.org. The entries VDB-12646, VDB-12647, VDB-12648 and VDB-12649 are related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.
Affected
- Mozilla Firefox 27.0
- Mozilla Seamonkey 2.24
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.6
VulDB Base Score: 5.3
VulDB Temp Score: 4.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Access controlCWE: CWE-264
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 73111
Nessus Name: FreeBSD : mozilla -- multiple vulnerabilities (610de647-af8d-11e3-a25b-b4b52fce4ce8)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
OpenVAS ID: 803420
OpenVAS Name: Mozilla Firefox Multiple Vulnerabilities-01 Mar14 (Windows)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Firefox 28
Timeline
01/16/2014 🔍03/18/2014 🔍
03/18/2014 🔍
03/18/2014 🔍
03/18/2014 🔍
03/19/2014 🔍
03/19/2014 🔍
03/19/2014 🔍
03/20/2014 🔍
06/15/2021 🔍
Sources
Vendor: mozilla.orgProduct: mozilla.org
Advisory: MFSA2014-22
Researcher: Jeff Gilbert
Organization: OUSPG
Status: Confirmed
Confirmation: 🔍
CVE: CVE-2014-1502 (🔍)
GCVE (CVE): GCVE-0-2014-1502
GCVE (VulDB): GCVE-100-12654
OVAL: 🔍
IAVM: 🔍
X-Force: 91863 - Mozilla Firefox and SeaMonkey WebGL security bypass, Medium Risk
SecurityFocus: 66278 - RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2014-15 through -28 Multiple Vulnerabilities
SecurityTracker: 1029928 - Mozilla Firefox Multiple Bugs Let Local Users Gain Elevated Privileges and Remote Users Execute Arbitrary Code, Deny Service, and Obtain Information
Vulnerability Center: 43689 - Mozilla Firefox and SeaMonkey RemoteSecurity Bypass and Content Injection via WebGL - CVE-2014-1502, Medium
Misc.: 🔍
See also: 🔍
Entry
Created: 03/20/2014 11:26 AMUpdated: 06/15/2021 07:43 PM
Changes: 03/20/2014 11:26 AM (88), 01/31/2018 09:52 AM (8), 06/15/2021 07:43 PM (2)
Complete: 🔍
Cache ID: 18:FB6:40
No comments yet. Languages: en.
Please log in to comment.