WebGL Function Vulnerability in Mozilla Firefox and SeaMonkey
CVE-2014-1502

Currently unrated

Key Information:

Vendor: Opensuse Project
Status: Opensuse
Vendor: CVE Published:; 19 March 2014

🔔 Create Opensuse Project Vulnerability Alert

What is CVE-2014-1502?

The WebGL.compressedTexImage2D and WebGL.compressedTexSubImage2D functions in earlier versions of Mozilla Firefox and SeaMonkey expose critical security flaws, allowing remote attackers to manipulate content across different domains. This vulnerability poses significant risks as it enables the circumvention of the Same Origin Policy, potentially leading to unauthorized content rendering. Users and organizations are encouraged to update to the latest versions to mitigate this risk.

References

https://security.gentoo.org/glsa/201504-01

vendor-advisoryx_refsource_GENTOO

http://lists.opensuse.org/opensuse-security-announce/2014...

vendor-advisoryx_refsource_SUSE

http://www.oracle.com/technetwork/topics/security/bulleti...

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 19, 2014
Vulnerability Reserved
Jan 16, 2014

CVE-2014-1502 Data

JSON