Revision Date: | 2014-10-06 | Version: | 18 |
Title: | Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions |
Description: | Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions. |
Family: | windows | Class: | vulnerability |
Status: | ACCEPTED | Reference(s): | CVE-2014-1483
|
Platform(s): | Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP
| Product(s): | Mozilla Firefox Mozilla SeaMonkey
|
Definition Synopsis |
Related to Mozilla Firefox Mainline Mozilla Firefox Mainline release is installed
AND Mozilla Firefox Mainline version less than 27.0
OR Related to Mozilla SeaMonkey
Mozilla Seamonkey is installed
AND Mozilla Seamonkey version less than 2.24
|