CVE-2014-1505
HighSummary
The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information and possibly bypass the Same Origin Policy to read text from a different domain via a timing attack involving feDisplacementMap elements.
Risk Assessment
Attackers may exploit this vulnerability to gain access to confidential data from other domains, potentially leading to privacy breaches and sensitive information leaks.
Recommendation
It is recommended to update browsers and applications to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Mozilla Firefox, Firefox ESR, Thunderbird, SeaMonkey
See all- CVE-2014-8634High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- CVE-2014-1529High
The Web Notification API in Mozilla Firefox, Thunderbird, and SeaMonkey before specified versions allows remote attackers to bypass source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page.
- CVE-2014-1518High
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- CVE-2014-1513High
In versions of Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, there is a vulnerability that does not prevent a zero-length transition during the use of an ArrayBuffer object. This allows remote attackers to execute arbitrary code or cause a denial of service.
- CVE-2014-1512High
A use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption during garbage collection.
- CVE-2014-1497High
The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.
- CVE-2014-1532Critical
A use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before version 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.
- CVE-2014-1514Critical
In versions of Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, there is a vulnerability that does not validate the length of the destination array before a copy operation. This allows remote attackers to execute arbitrary code or cause a denial of service through incorrect use of the TypedArrayObject class.
- CVE-2014-1511Critical
Mozilla Firefox versions before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
- CVE-2014-1510Critical
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.
Original NVD description (English source)
The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.