CVE ID:	CVE-2014-1489
Description:	Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user- assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
Test IDs:	1.3.6.1.4.1.25623.1.2.1.2014.10   1.3.6.1.4.1.25623.1.1.4.2014.0248.2   1.3.6.1.4.1.25623.1.1.4.2014.0248.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1489 BugTraq ID: 65329 http://www.securityfocus.com/bid/65329 https://security.gentoo.org/glsa/201504-01 http://osvdb.org/102874 http://www.securitytracker.com/id/1029717 http://secunia.com/advisories/56888 SuSE Security Announcement: SUSE-SU-2014:0248 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html SuSE Security Announcement: openSUSE-SU-2014:0212 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html http://www.ubuntu.com/usn/USN-2102-1 http://www.ubuntu.com/usn/USN-2102-2 XForce ISS Database: firefox-cve20141489-sec-bypass(90888) https://exchange.xforce.ibmcloud.com/vulnerabilities/90888