Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1492 State: PUBLISHED Published: 2014-03-25T01:00:00 Last Updated: 2024-08-06T09:42:36.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.vmware.com/security/advisories/VM
ww.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www.debian.org/security/2014/dsa-2994 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html - https://developer.mozilla.org/en-US/docs/NSS/NSS_3.16_release_notes - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.mozilla.org/security/announce/2014/mfsa2014-45.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/ope
0/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html - http://secunia.com/advisories/60621 - http://secunia.com/advisories/60794 - https://security.gentoo.org/glsa/201504-01 - http://secunia.com/advisories/59866 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - https://bugzilla.mozilla.org/show_bug.cgi?id=903885 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - https://hg.mozilla.org/projects/nss/rev/709d4e59797
ists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html - https://hg.mozilla.org/projects/nss/rev/709d4e597979 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www.ubuntu.com/usn/USN-2185-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1079851 - http://www.securityfocus.com/bid/66356 - http://www.ubuntu.com/usn/USN-2159-1 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CVE ID: CVE-2014-1493 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=896268 - http://www.securityfocus.com/bid/66412 - https://bugzilla.mozilla.org/show_bug.cgi?id=96734
org/show_bug.cgi?id=896268 - http://www.securityfocus.com/bid/66412 - https://bugzilla.mozilla.org/show_bug.cgi?id=967341 - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.mozilla.org/security/announce/2014/mfsa2014-15.html - http://www.debian.org/security/2014/dsa-2881 - https://bugzilla.mozilla.org/show_bug.cgi?id=960145 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.
s://bugzilla.mozilla.org/show_bug.cgi?id=960145 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=965982 - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=977538 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - https://bugzilla.mozilla.org/show_bug.cgi?id=963974 - https://bugzilla.mozilla.org/show_bug.cgi?id=958867
CVE ID: CVE-2014-1494 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=627295 - https://bugzilla.mozilla.org/show_bug.cgi?id=909586 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-anno
g/show_bug.cgi?id=909586 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=938615 - http://www.mozilla.org/security/announce/2014/mfsa2014-15.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - https://bugzilla.mozilla.org/show_bug.cgi?id=949843 - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=927579 - https://bugzilla.mozilla.org/show_bug.cgi?id=938626 - http://lists.opensuse.org/opensuse-
a.org/show_bug.cgi?id=927579 - https://bugzilla.mozilla.org/show_bug.cgi?id=938626 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - https://bugzilla.mozilla.org/show_bug.cgi?id=964462 - https://bugzilla.mozilla.org/show_bug.cgi?id=933219 - https://bugzilla.mozilla.org/show_bug.cgi?id=932496
CVE ID: CVE-2014-1496 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=925747 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html -
curity-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-16.html
CVE ID: CVE-2014-1497 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66423 - http://rhn.redhat.com/errata/RHSA-2014-0310.h
Program Container: References: - http://www.securityfocus.com/bid/66423 - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.mozilla.org/security/announce/2014/mfsa2014-17.html - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.debian.org/security/2014/dsa-2881 - https://bugzilla.mozilla.org/show_bug.cgi?id=966311 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-031
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1498 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-18.html - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-
curity/announce/2014/mfsa2014-18.html - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=935618 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1499 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-19.html - https://bugzilla.mozilla.org/show_bug.cgi?id=961512 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/ms
id=961512 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1500 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-20.html - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletin
ensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - https://bugzilla.mozilla.org/show_bug.cgi?id=956524
CVE ID: CVE-2014-1501 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-21.html - https://bugzilla.mozilla.org/show_bug.cgi?id=960135
CVE ID: CVE-2014-1502 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - ht
ity-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.mozilla.org/security/announce/2014/mfsa2014-22.html - https://bugzilla.mozilla.org/show_bug.cgi?id=972622 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1504 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed after a browser restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-23.html - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/201
mfsa2014-23.html - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=911547 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1505 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=941887 - http://rhn.red
alyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=941887 - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.debian.org/security/2014/dsa-2881 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - ht
.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://www.mozilla.org/security/announce/2014/mfsa2014-28.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - http://www.securityfocus.com/bid/66418
CVE ID: CVE-2014-1506 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-24.html - https://bugzilla.mozilla.org/show_bug.cgi?id=944374 - http://archives.neohapsis.com/archives/
ce/2014/mfsa2014-24.html - https://bugzilla.mozilla.org/show_bug.cgi?id=944374 - http://archives.neohapsis.com/archives/bugtraq/2014-03/0153.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/66420
CVE ID: CVE-2014-1507 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile object. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=940684 - http://www.mozilla.org/security/announce/2014/mf
16-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=940684 - http://www.mozilla.org/security/announce/2014/mfsa2014-25.html
CVE ID: CVE-2014-1508 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-26.html - http://rh
Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2014/mfsa2014-26.html - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.debian.org/security/2014/dsa-2911 - https://bugzilla.mozilla.org/show_bug.cgi?id=963198 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.securityfocus.com/bid/66426 - http://www.debian.org/security/2014/dsa-2881 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/R
4/dsa-2881 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1509 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66425 - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.mozilla.org/security/announce/2014/mfsa2014-27.html - http
http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.mozilla.org/security/announce/2014/mfsa2014-27.html - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=966021 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
CVE ID: CVE-2014-1510 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-
n.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.ubuntu.com/usn/USN-2151-1 - http://www.securityfocus.com/bid/66206 - http://www.debian.org/security/2014/dsa-2881 - https://bugzilla.mozilla.org/show_bug.cgi?id=982906 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html - http://rhn.redhat.com/errata/RHSA-2014-0316.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - htt
curity-announce/2014-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html - http://www.mozilla.org/security/announce/2014/mfsa2014-29.html
CVE ID: CVE-2014-1511 State: PUBLISHED Published: 2014-03-19T10:00:00 Last Updated: 2024-08-06T09:42:36.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66207 - http://rhn.redhat.com/errata/RHSA-2014-0310.html - http://www.debian.org/security/2014/dsa-2911 - https://security.gentoo.org/glsa/201504-01 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html - http://www.oracle.co