Denial of Service Vulnerability in Mozilla Firefox and SeaMonkey
CVE-2014-1500

Currently unrated

Key Information:

Vendor: Opensuse Project
Status: Opensuse
Vendor: CVE Published:; 19 March 2014

🔔 Create Opensuse Project Vulnerability Alert

What is CVE-2014-1500?

This vulnerability allows remote attackers to initiate a denial of service by exploiting the onbeforeunload event, leading to excessive resource consumption and potential application hangs. The flaw could be triggered by malicious background JavaScript, resulting in degraded performance or complete unresponsiveness of the affected applications.

References

http://www.mozilla.org/security/announce/2014/mfsa2014-20...

x_refsource_CONFIRM

https://security.gentoo.org/glsa/201504-01

vendor-advisoryx_refsource_GENTOO

http://lists.opensuse.org/opensuse-security-announce/2014...

vendor-advisoryx_refsource_SUSE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 19, 2014
Vulnerability Reserved
Jan 16, 2014

CVE-2014-1500 Data

JSON