CVE-2014-1489

Mozilla: Firefox default start page UI content invokable by script (MFSA 2014-10)

Published Feb 6, 2014 CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Description
Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-1565 Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
Ubuntu USN Ubuntu USN USN-2102-1 Firefox vulnerabilities
History

No history.