Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-8631
HistoryDec 11, 2014 - 12:00 a.m.

CVE-2014-8631

2014-12-1100:00:00
ubuntu.com
ubuntu.com
14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

64.9%

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before
34.0 and SeaMonkey before 2.31 supports native-interface passing, which
allows remote attackers to bypass intended DOM object restrictions via a
call to an unspecified method.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 34.0UNKNOWN
ubuntu14.04noarchfirefox< 34.0UNKNOWN
ubuntu14.10noarchfirefox< 34.0UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

64.9%