CVE-2014-1502

2014-03-1910:55:06

CWE-346

[email protected]

web.nvd.nist.gov

cve-2014-1502

mozilla firefox

seamonkey

webgl

same origin policy

remote attack

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%

JSON

The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.

Affected configurations

NVD

Node

opensuseopensuseMatch13.1

opensuse_projectopensuseMatch11.4

opensuse_projectopensuseMatch12.3

Node

suselinux_enterprise_desktopMatch11sp3

suselinux_enterprise_serverMatch11sp3

suselinux_enterprise_serverMatch11sp3vmware

suselinux_enterprise_software_development_kitMatch11sp3

Node

oraclesolarisMatch11.3

Node

mozillafirefoxRange<28.0

Node

mozillaseamonkeyRange<2.25

CPENameOperatorVersion
opensuse:opensuseopensuseeq13.1
opensuse_project:opensuseopensuse project opensuseeq11.4
opensuse_project:opensuseopensuse project opensuseeq12.3