Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-1501
HistoryMar 19, 2014 - 10:55 a.m.

CVE-2014-1501

2014-03-1910:55:06
CWE-264
[email protected]
web.nvd.nist.gov
35
mozilla
firefox
android
same origin policy
cve-2014-1501
nvd

8.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

56.1%

JSON

Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the “Open Link in New Tab” menu selection.

Affected configurations

NVD
Node
oraclesolarisMatch11.3
Node
mozillafirefoxRange≤27.0.1
OR
mozillafirefoxMatch0.1
OR
mozillafirefoxMatch0.2
OR
mozillafirefoxMatch0.3
OR
mozillafirefoxMatch0.4
OR
mozillafirefoxMatch0.5
OR
mozillafirefoxMatch0.6
OR
mozillafirefoxMatch0.6.1
OR
mozillafirefoxMatch0.7
OR
mozillafirefoxMatch0.7.1
OR
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9rc
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0preview_release
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.0.8
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatch1.5.0.4
OR
mozillafirefoxMatch1.5.0.5
OR
mozillafirefoxMatch1.5.0.6
OR
mozillafirefoxMatch1.5.0.7
OR
mozillafirefoxMatch1.5.0.8
OR
mozillafirefoxMatch1.5.0.9
OR
mozillafirefoxMatch1.5.0.10
OR
mozillafirefoxMatch1.5.0.11
OR
mozillafirefoxMatch1.5.0.12
OR
mozillafirefoxMatch1.5.1
OR
mozillafirefoxMatch1.5.2
OR
mozillafirefoxMatch1.5.3
OR
mozillafirefoxMatch1.5.4
OR
mozillafirefoxMatch1.5.5
OR
mozillafirefoxMatch1.5.6
OR
mozillafirefoxMatch1.5.7
OR
mozillafirefoxMatch1.5.8
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.2
OR
mozillafirefoxMatch2.0.0.3
OR
mozillafirefoxMatch2.0.0.4
OR
mozillafirefoxMatch2.0.0.5
OR
mozillafirefoxMatch2.0.0.6
OR
mozillafirefoxMatch2.0.0.7
OR
mozillafirefoxMatch2.0.0.8
OR
mozillafirefoxMatch2.0.0.9
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillafirefoxMatch2.0.0.14
OR
mozillafirefoxMatch2.0.0.15
OR
mozillafirefoxMatch2.0.0.16
OR
mozillafirefoxMatch2.0.0.17
OR
mozillafirefoxMatch2.0.0.18
OR
mozillafirefoxMatch2.0.0.19
OR
mozillafirefoxMatch2.0.0.20
OR
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.0.14
OR
mozillafirefoxMatch3.0.15
OR
mozillafirefoxMatch3.0.16
OR
mozillafirefoxMatch3.0.17
OR
mozillafirefoxMatch3.0.18
OR
mozillafirefoxMatch3.0.19
OR
mozillafirefoxMatch3.5
OR
mozillafirefoxMatch3.5.1
OR
mozillafirefoxMatch3.5.2
OR
mozillafirefoxMatch3.5.3
OR
mozillafirefoxMatch3.5.4
OR
mozillafirefoxMatch3.5.5
OR
mozillafirefoxMatch3.5.6
OR
mozillafirefoxMatch3.5.7
OR
mozillafirefoxMatch3.5.8
OR
mozillafirefoxMatch3.5.9
OR
mozillafirefoxMatch3.5.10
OR
mozillafirefoxMatch3.5.11
OR
mozillafirefoxMatch3.5.12
OR
mozillafirefoxMatch3.5.13
OR
mozillafirefoxMatch3.5.14
OR
mozillafirefoxMatch3.5.15
OR
mozillafirefoxMatch3.5.16
OR
mozillafirefoxMatch3.5.17
OR
mozillafirefoxMatch3.5.18
OR
mozillafirefoxMatch3.5.19
OR
mozillafirefoxMatch3.6
OR
mozillafirefoxMatch3.6.2
OR
mozillafirefoxMatch3.6.3
OR
mozillafirefoxMatch3.6.4
OR
mozillafirefoxMatch3.6.6
OR
mozillafirefoxMatch3.6.7
OR
mozillafirefoxMatch3.6.8
OR
mozillafirefoxMatch3.6.9
OR
mozillafirefoxMatch3.6.10
OR
mozillafirefoxMatch3.6.11
OR
mozillafirefoxMatch3.6.12
OR
mozillafirefoxMatch3.6.13
OR
mozillafirefoxMatch3.6.14
OR
mozillafirefoxMatch3.6.15
OR
mozillafirefoxMatch3.6.16
OR
mozillafirefoxMatch3.6.17
OR
mozillafirefoxMatch3.6.18
OR
mozillafirefoxMatch3.6.19
OR
mozillafirefoxMatch3.6.20
OR
mozillafirefoxMatch3.6.21
OR
mozillafirefoxMatch3.6.22
OR
mozillafirefoxMatch3.6.23
OR
mozillafirefoxMatch3.6.24
OR
mozillafirefoxMatch3.6.25
OR
mozillafirefoxMatch3.6.26
OR
mozillafirefoxMatch3.6.27
OR
mozillafirefoxMatch3.6.28
OR
mozillafirefoxMatch4.0
OR
mozillafirefoxMatch4.0beta1
OR
mozillafirefoxMatch4.0beta10
OR
mozillafirefoxMatch4.0beta11
OR
mozillafirefoxMatch4.0beta12
OR
mozillafirefoxMatch4.0beta2
OR
mozillafirefoxMatch4.0beta3
OR
mozillafirefoxMatch4.0beta4
OR
mozillafirefoxMatch4.0beta5
OR
mozillafirefoxMatch4.0beta6
OR
mozillafirefoxMatch4.0beta7
OR
mozillafirefoxMatch4.0beta8
OR
mozillafirefoxMatch4.0beta9
OR
mozillafirefoxMatch4.0.1
OR
mozillafirefoxMatch5.0
OR
mozillafirefoxMatch5.0.1
OR
mozillafirefoxMatch6.0
OR
mozillafirefoxMatch6.0.1
OR
mozillafirefoxMatch6.0.2
OR
mozillafirefoxMatch7.0
OR
mozillafirefoxMatch7.0.1
OR
mozillafirefoxMatch8.0
OR
mozillafirefoxMatch8.0.1
OR
mozillafirefoxMatch9.0
OR
mozillafirefoxMatch9.0.1
OR
mozillafirefoxMatch10.0
OR
mozillafirefoxMatch10.0.1
OR
mozillafirefoxMatch10.0.2
OR
mozillafirefoxMatch10.0.3
OR
mozillafirefoxMatch10.0.4
OR
mozillafirefoxMatch10.0.5
OR
mozillafirefoxMatch10.0.6
OR
mozillafirefoxMatch10.0.7
OR
mozillafirefoxMatch10.0.8
OR
mozillafirefoxMatch10.0.9
OR
mozillafirefoxMatch10.0.10
OR
mozillafirefoxMatch10.0.11
OR
mozillafirefoxMatch10.0.12
OR
mozillafirefoxMatch11.0
OR
mozillafirefoxMatch12.0
OR
mozillafirefoxMatch12.0beta6
OR
mozillafirefoxMatch13.0
OR
mozillafirefoxMatch13.0.1
OR
mozillafirefoxMatch14.0
OR
mozillafirefoxMatch14.0.1
OR
mozillafirefoxMatch15.0
OR
mozillafirefoxMatch15.0.1
OR
mozillafirefoxMatch16.0
OR
mozillafirefoxMatch16.0.1
OR
mozillafirefoxMatch16.0.2
OR
mozillafirefoxMatch17.0.2
OR
mozillafirefoxMatch17.0.3
OR
mozillafirefoxMatch17.0.4
OR
mozillafirefoxMatch17.0.5
OR
mozillafirefoxMatch17.0.6
OR
mozillafirefoxMatch17.0.7
OR
mozillafirefoxMatch17.0.8
OR
mozillafirefoxMatch17.0.9
OR
mozillafirefoxMatch17.0.10
OR
mozillafirefoxMatch17.0.11
OR
mozillafirefoxMatch18.0
OR
mozillafirefoxMatch18.0.1
OR
mozillafirefoxMatch18.0.2
OR
mozillafirefoxMatch19.0
OR
mozillafirefoxMatch19.0.1
OR
mozillafirefoxMatch19.0.2
OR
mozillafirefoxMatch20.0
OR
mozillafirefoxMatch20.0.1
OR
mozillafirefoxMatch21.0
OR
mozillafirefoxMatch23.0
OR
mozillafirefoxMatch23.0.1
OR
mozillafirefoxMatch24.0
OR
mozillafirefoxMatch24.1
OR
mozillafirefoxMatch24.1.1
OR
mozillafirefoxMatch25.0
OR
mozillafirefoxMatch25.0.1
OR
mozillafirefoxMatch26.0
OR
mozillafirefoxMatch27.0
AND
googleandroid
Node
suselinux_enterprise_desktopMatch11sp3
OR
suselinux_enterprise_serverMatch11sp3
OR
suselinux_enterprise_serverMatch11sp3vmware
OR
suselinux_enterprise_software_development_kitMatch11sp3
CPENameOperatorVersion
oracle:solarisoracle solariseq11.3

Related

openvas 3
prion 1
ubuntucve 1
mozilla 1
nvd 1
cvelist 1
nessus 3
suse 1
freebsd 1
securityvulns 1
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-21) - Deprecated
2021-11-11 00:00:00
SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0418-1)
2015-10-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0418-1)
2021-06-09 00:00:00
prion
prion
Design/Logic Flaw
2014-03-19 10:55:00
ubuntucve
ubuntucve
CVE-2014-1501
2014-03-19 00:00:00
mozilla
mozilla
Local file access via Open Link in new tab — Mozilla
2014-03-18 00:00:00
nvd
nvd
CVE-2014-1501
2014-03-19 10:55:06
cvelist
cvelist
CVE-2014-1501
2014-03-19 10:00:00
nessus
nessus
Mozilla Firefox for Android < 28.0 Multiple Vulnerabilities
2014-03-26 00:00:00
SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9049)
2014-03-22 00:00:00
FreeBSD : mozilla -- multiple vulnerabilities (610de647-af8d-11e3-a25b-b4b52fce4ce8)
2014-03-20 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2014-03-21 23:04:18
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-03-19 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey / nss multiple security vulnerabilities
2014-03-27 00:00:00

8.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

56.1%

JSON
Related for CVE-2014-1501
openvas3prion1ubuntucve1mozilla1nvd1cvelist1nessus3suse1freebsd1securityvulns1