Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMozillaCVE-2014-1561
HistoryJul 23, 2014 - 11:12 a.m.

CVE-2014-1561

2014-07-2311:12:43
CWE-264
mozilla
web.nvd.nist.gov
44
cve-2014-1561
mozilla firefox
drag-and-drop
spoofing
vulnerability
nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

9.1

Confidence

High

EPSS

0.007

Percentile

79.9%

JSON

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.

Affected configurations

Nvd
Node
mozillafirefoxRange≤30.0
Node
oraclesolarisMatch11.3
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
oraclesolaris11.3cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*

Related

mozilla 1
openvas 10
nvd 1
ubuntucve 1
prion 1
cvelist 1
nessus 10
suse 3
ubuntu 1
freebsd 1
securityvulns 1
mageia 1
gentoo 1
osv 1
mozilla
mozilla
Toolbar dialog customization event spoofing — Mozilla
2014-07-22 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-60) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2014:0939-1)
2014-08-05 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Aug 2014) - Mac OS X
2014-08-07 00:00:00
nvd
nvd
CVE-2014-1561
2014-07-23 11:12:43
ubuntucve
ubuntucve
CVE-2014-1561
2014-07-22 00:00:00
prion
prion
Design/Logic Flaw
2014-07-23 11:12:00
cvelist
cvelist
CVE-2014-1561
2014-07-23 10:00:00
nessus
nessus
openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)
2014-07-30 00:00:00
openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)
2014-07-30 00:00:00
Firefox < 31.0 Multiple Vulnerabilities (Mac OS X)
2014-07-24 00:00:00
suse
suse
MozillaFirefox: Update to Mozilla Firefox 31 (important)
2014-07-30 20:43:23
Security update for Mozilla Firefox (important)
2014-08-02 01:04:22
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
ubuntu
ubuntu
Firefox vulnerabilities
2014-07-22 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-07-22 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-07-28 00:00:00
mageia
mageia
Updated iceape package fixes security vulnerabilities
2014-10-23 17:27:57
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
osv
osv
MozillaFirefox-50.1.0-1.1 on GA media
2024-06-15 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

9.1

Confidence

High

EPSS

0.007

Percentile

79.9%

JSON
Related for CVE-2014-1561
mozilla1openvas10nvd1ubuntucve1prion1cvelist1nessus10suse3ubuntu1freebsd1securityvulns1mageia1gentoo1osv1