CVE-2014-1510
Critical · 9.8CVSS
9.8
EPSS
82.3%
Published
Mar 19, 2014
CISA due date
—
The record
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:7 | icedove | 0 | 24.4.0-1~deb7u1 |
| Debian:7 | iceweasel | 0 | 24.4.0esr-1~deb7u2 |
| Mageia:3 | firefox | 0 | 24.4.0-1.mga3 |
| Mageia:3 | firefox-l10n | 0 | 24.4.0-1.mga3 |
| Mageia:3 | iceape | 0 | 2.25-1.mga3 |
| Mageia:3 | nspr | 0 | 4.10.4-1.mga3 |
| Mageia:3 | nss | 0 | 3.16.0-1.mga3 |
| Mageia:3 | rootcerts | 0 | 20140318.00-1.mga3 |
| Mageia:3 | thunderbird | 0 | 24.4.0-1.mga3 |
| Mageia:3 | thunderbird-l10n | 0 | 24.4.0-1.mga3 |
| Mageia:4 | firefox | 0 | 24.4.0-1.mga4 |
| Mageia:4 | firefox-l10n | 0 | 24.4.0-1.mga4 |
| Mageia:4 | iceape | 0 | 2.25-1.mga4 |
| Mageia:4 | nspr | 0 | 4.10.4-1.mga4 |
| Mageia:4 | nss | 0 | 3.16.0-1.mga4 |
| Mageia:4 | rootcerts | 0 | 20140318.00-1.mga4 |
| Mageia:4 | thunderbird | 0 | 24.4.0-1.mga4 |
| Mageia:4 | thunderbird-l10n | 0 | 24.4.0-1.mga4 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:24.4.0-1.el6_5 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:24.4.0-1.el5_10 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:24.4.0-1.el5_10 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2017-7753 An out-of-bounds read occurs when applying style rules to pseudo-elements, such as… Also affects icedove
- CVE-2017-5470 Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Also affects icedove
- CVE-2017-5404 A use-after-free error can occur when manipulating ranges in selections with one node… Also affects icedove
- CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Also affects icedove
- CVE-2016-9899 Use-after-free while manipulating DOM events and removing audio elements due to errors in… Also affects icedove
- CVE-2017-5375 JIT code allocation can allow for a bypass of ASLR and DEP protections leading to… Also affects icedove
- CVE-2017-5373 Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Also affects icedove
- CVE-2016-9893 Memory safety bugs were reported in Thunderbird 45.5. Also affects icedove