Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-1489

Опубликовано: 04 фев. 2014
Источник: redhat
CVSS2: 4.3

Описание

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

Отчет

This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5 and 6

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5firefoxNot affected
Red Hat Enterprise Linux 5thunderbirdNot affected
Red Hat Enterprise Linux 6firefoxNot affected
Red Hat Enterprise Linux 6thunderbirdNot affected

Показывать по

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1060948Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 11 лет назад

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

nvd
больше 11 лет назад

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

debian
больше 11 лет назад

Mozilla Firefox before 27.0 does not properly restrict access to about ...

github
около 3 лет назад

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

fstec
больше 11 лет назад

Уязвимость браузера Firefox, позволяющая злоумышленнику выполнить отказ в обслуживании

4.3 Medium

CVSS2