Clickjacking Vulnerability in Mozilla Firefox and SeaMonkey
CVE-2014-1480

Currently unrated

Key Information:

Vendor

Suse
Status
Linux Enterprise Desktop
Linux Enterprise Server
Opensuse
Linux Enterprise Software Development Kit
Vendor
CVE Published:
6 February 2014

What is CVE-2014-1480?

A vulnerability in the file-download implementation of Mozilla Firefox and SeaMonkey allows remote attackers to exploit a flaw in how button selections are managed. This can lead to clickjacking attacks where an attacker could craft a malicious website designed to launch unintended file downloads through deceptive user interactions, thereby compromising user security and privacy.

References

http://lists.opensuse.org/opensuse-security-announce/2014...
vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1029717
vdb-entryx_refsource_SECTRACK
http://www.mozilla.org/security/announce/2014/mfsa2014-03...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.