CVE-2014-1530

MEDIUM · 6.1 CVSS Gepubliceerd: 30-04-2014 CWE-79

Beschrijving

The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.

Vendors

Mozilla Fedoraproject Canonical Debian Redhat Opensuse Suse

Affected products

Firefox Seamonkey Thunderbird Fedora Ubuntu Linux Debian Linux Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Eus Enterprise Linux Server Tus Enterprise Linux Workstation Opensuse Suse Linux Enterprise Server

Beschrijving

Vendors

Affected products

References