EUVD-2014-8469

Malware in sbrugna...

CVE-2014-8631

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method...

CVE-2014-8632

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal...

Design/Logic Flaw

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal...

CVE-2014-8632

CVE-2014-8632 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The issue is in the structured-clone implementation where interactions with XrayWrapper property filtering do not properly enforce restrictions, allowing a remote attacker to bypass intended DOM object restrictions b...

CVE-2014-8631

CVE-2014-8631 affects Firefox (before 34.0) and SeaMonkey (before 2.31) where the Chrome Object Wrapper (COW) allows native-interface passing, potentially bypassing DOM object restrictions via an unspecified method. This remote vulnerability could be exploited without user interaction; exploitati...

CVE-2014-8631

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method...

CVE-2014-8632: Improper Access Control

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal...

PT-2014-8656

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 34.0 SeaMonkey versions prior to 2.31 Description The issue arises from the structured-clone implementation not properly interacting with XrayWrapper property filtering. This allows remote attackers to bypass...

PT-2014-8655

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 34.0 SeaMonkey versions prior to 2.31 Description The issue concerns the Chrome Object Wrapper COW implementation, which allows remote attackers to bypass intended DOM object restrictions. This is achieved...