Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2014-02-06 05:44
Updated : 2025-04-11 00:51
NVD link : CVE-2014-1489
Mitre link : CVE-2014-1489
CVE.ORG link : CVE-2014-1489
JSON object : View
Products Affected
opensuse
- opensuse
oracle
- solaris
suse
- linux_enterprise_desktop
- linux_enterprise_server
- linux_enterprise_software_development_kit
opensuse_project
- opensuse
mozilla
- firefox
canonical
- ubuntu_linux
CWE
CWE-264
Permissions, Privileges, and Access Controls