CVE-2014-1590

Currently unrated

Key Information:

Vendor
Mozilla
Status
Firefox Esr
Firefox
Seamonkey
Thunderbird
Vendor
CVE Published:
11 December 2014

Summary

The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.

References

http://www.mozilla.org/security/announce/2014/mfsa2014-85...
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201504-01
vendor-advisoryx_refsource_GENTOO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.