CVE-2014-1529
CVE-2014-1529
The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.htmlhttp://lists.opensuse.org/opensuse-updates/2014-05/msg00010.htmlhttp://lists.opensuse.org/opensuse-updates/2014-05/msg00013.htmlhttp://lists.opensuse.org/opensuse-updates/2014-05/msg00033.htmlhttp://lists.opensuse.org/opensuse-updates/2014-05/msg00040.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0448.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0449.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=987003http://secunia.com/advisories/59866