5.8

CVE-2014-1561

EPSS 0.75%
Published 23.07.2014 11:12:43
Last modified 12.04.2025 10:46:40
Source security@mozilla.org
Teams watchlist Login
Open Login

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 30.0

Oracle ≫ Solaris Version11.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.75%	0.708

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:N/I:P/A:P

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory

https://security.gentoo.org/glsa/201504-01

http://secunia.com/advisories/59760

http://secunia.com/advisories/60628

http://www.securitytracker.com/id/1030619

http://www.mozilla.org/security/announce/2014/mfsa2014-60.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1000514

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=910375

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2014-1561

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-1561

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-1561

EUVD