CVE-2014-1483

Mozilla: Information disclosure with *FromPoint on iframes (MFSA 2014-05)

Published Feb 6, 2014 CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Description
Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-1559 Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.
Ubuntu USN Ubuntu USN USN-2102-1 Firefox vulnerabilities
History

No history.