CVE-2014-1480

2014-02-0500:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

57.1%

JSON

The file-download implementation in Mozilla Firefox before 27.0 and
SeaMonkey before 2.24 does not properly restrict the timing of button
selections, which allows remote attackers to conduct clickjacking attacks,
and trigger unintended launching of a downloaded file, via a crafted web
site.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 27.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 27.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.10noarchfirefox< 27.0+build1-0ubuntu0.13.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 27.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 27.0+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.10	noarch	firefox	< 27.0+build1-0ubuntu0.13.10.1	UNKNOWN