FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2014-1529

This CVE name corresponds to:

Entered	Topic
2014-04-29	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2014-1529 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2014-1529
Phase	Assigned(20140116)

Description

The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/2014/mfsa2014-42.html
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=987003
DEBIAN	DSA-2918
DEBIAN	DSA-2924
FEDORA	FEDORA-2014-5829
FEDORA	FEDORA-2014-5833
REDHAT	RHSA-2014:0448
REDHAT	RHSA-2014:0449
SUSE	SUSE-SU-2014:0665
SUSE	openSUSE-SU-2014:0602
SUSE	openSUSE-SU-2014:0640
SUSE	openSUSE-SU-2014:0599
SUSE	openSUSE-SU-2014:0629
SUSE	SUSE-SU-2014:0727
UBUNTU	USN-2189-1
UBUNTU	USN-2185-1
SECTRACK	1030163
SECTRACK	1030164
SECTRACK	1030165
SECUNIA	59866