5.8

CVE-2014-1561

EPSS 0.75%
Veröffentlicht 23.07.2014 11:12:43
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 30.0

Oracle ≫ Solaris Version11.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.75%	0.708

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:N/I:P/A:P

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory

https://security.gentoo.org/glsa/201504-01

http://secunia.com/advisories/59760

http://secunia.com/advisories/60628

http://www.securitytracker.com/id/1030619

http://www.mozilla.org/security/announce/2014/mfsa2014-60.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1000514

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=910375

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2014-1561

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-1561

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-1561

EUVD