CVE-2014-1583 in Mozilla Firefox
요약 (영어)
The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.
예약하다
2014. 01. 16.
공개
2014. 10. 15.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 67804 | Mozilla Firefox AlarmAPI 메모리 손상 | 416 | 입증되지 않음 | 공식 수정 | CVE-2014-1583 |