CVE-2014-1481 in Firefox
Summary
Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging inconsistency in native getter methods across different JavaScript engines.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/16/2014
Disclosure
02/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12168 | Mozilla Firefox JavaScript access control | 264 | Unproven | Official fix | CVE-2014-1481 |