CVE-2014-1529
high
CVSS v3
8.8
CVSS v2
9.3
VIR risk
8.8
Description
The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.
Predictions
Exploit likelihood
92%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: security@mozilla.org — https://bugzilla.mozilla.org/show_bug.cgi?id=987003
Vendor advisory: security@mozilla.org — http://www.mozilla.org/security/announce/2014/mfsa2014-42.html
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| ubuntu | 12.04 | affected | |
| ubuntu | 12.10 | affected | |
| ubuntu | 13.10 | affected | |
| ubuntu | 14.04 | affected | |
| debian | 7.0 | affected | |
| debian | 8.0 | affected | |
| rhel | 5.0 | affected | |
| rhel | 6.0 | affected | |
| rhel | 6.5 | affected | |
| suse | 11.4 | affected | |
| suse | 12.3 | affected | |
| suse | 13.1 | affected | |
| suse | 10 | affected | |
| suse | 11 | affected | |
| fedora | 19 | affected | |
| fedora | 20 | affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mozilla | firefox | {"endExcluding":"29.0"} | 29.0 |
| mozilla | seamonkey | {"endExcluding":"2.26"} | 2.26 |
| mozilla | thunderbird | {"endExcluding":"24.5"} | 24.5 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00013.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00033.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00040.html
- http://rhn.redhat.com/errata/RHSA-2014-0448.html
- http://rhn.redhat.com/errata/RHSA-2014-0449.html
- http://secunia.com/advisories/59866
- http://www.debian.org/security/2014/dsa-2918
- http://www.debian.org/security/2014/dsa-2924
- http://www.mozilla.org/security/announce/2014/mfsa2014-42.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/67135
- http://www.securitytracker.com/id/1030163
- http://www.securitytracker.com/id/1030164
- http://www.securitytracker.com/id/1030165
- http://www.ubuntu.com/usn/USN-2185-1
- http://www.ubuntu.com/usn/USN-2189-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=987003
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
CWEs
CWE-269
Verify integrity in audit chain (admin only). AS-IS.