General : Mozilla Firefox Security Advisory (MFSA2014-66)

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.2.1.2014.66

Category: General

Title: Mozilla Firefox Security Advisory (MFSA2014-66) - Linux

Summary: This host is missing a security update for Mozilla Firefox.

Description: Summary:
This host is missing a security update for Mozilla Firefox.

Vulnerability Insight:
IFRAME sandbox same-origin access through redirect
Mozilla developer Boris Zbarsky discovered an issue where
network-level redirects cause an sandbox to forget<br>its unique origin and behave as if the allow-same-origin keyword<br>were applied. This allows the sandboxed content to access other content from<br>the same origin without explicit approval.<br><br>Affected Software/OS:<br>Firefox version(s) below 31.<br><br>Solution:<br>The vendor has released an update. Please see the reference(s) for more information.<br><br>CVSS Score:<br>5.8<br><br>CVSS Vector:<br>AV:N/AC:M/Au:N/C:P/I:P/A:N<br><br></td></tr> <tr><td class=std valign=top>Cross-Ref:</td><td class=std> <a href="/smysecure/catid.html?ctype=cve&id=CVE-2014-1552">Common Vulnerability Exposure (CVE) ID: CVE-2014-1552</a><br> <a href="https://security.gentoo.org/glsa/201504-01">https://security.gentoo.org/glsa/201504-01</a><br> <a href="http://www.securitytracker.com/id/1030619">http://www.securitytracker.com/id/1030619</a><br> <a href="http://www.securitytracker.com/id/1030620">http://www.securitytracker.com/id/1030620</a><br> <a href="http://secunia.com/advisories/59760">http://secunia.com/advisories/59760</a><br> <a href="http://secunia.com/advisories/60628">http://secunia.com/advisories/60628</a><br> </td></tr> <tr><td class=std valign=top>Copyright</td><td class=std>Copyright (C) 2021 Greenbone Networks GmbH</td></tr> </table><P><P> <table BORDER=1 cellspacing=0 cellpadding=5 bgcolor=#eeffee><tr><td class=std valign=top>This is only one of <a href="index.html#cate"><b>145615</b> vulnerability tests</a> in our test suite. Find out more about running a <a href='../smysecure/index.html'>complete security audit</a>.<p>To run a free test of this vulnerability against your system, register below.</td></tr></table><P><P> <br> </div> </div> <br> <hr> <P> <center><div class=xsmall>© 1998-2025 E-Soft Inc. All rights reserved.</div></center> <p> <div id=footer><script>oHelpGlobals.state = ""; </script> <div class=hide id=hsqhelptitle></div> <div class=hide id=hsqhelptext><div class=std></div></div> </div></body> </html>

Test ID:	1.3.6.1.4.1.25623.1.2.1.2014.66
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2014-66) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: IFRAME sandbox same-origin access through redirect Mozilla developer Boris Zbarsky discovered an issue where network-level redirects cause an sandbox to forget<br>its unique origin and behave as if the allow-same-origin keyword<br>were applied. This allows the sandboxed content to access other content from<br>the same origin without explicit approval.<br><br>Affected Software/OS:<br>Firefox version(s) below 31.<br><br>Solution:<br>The vendor has released an update. Please see the reference(s) for more information.<br><br>CVSS Score:<br>5.8<br><br>CVSS Vector:<br>AV:N/AC:M/Au:N/C:P/I:P/A:N<br><br></td></tr> <tr><td class=std valign=top>Cross-Ref:</td><td class=std> <a href="/smysecure/catid.html?ctype=cve&id=CVE-2014-1552">Common Vulnerability Exposure (CVE) ID: CVE-2014-1552</a><br> <a href="https://security.gentoo.org/glsa/201504-01">https://security.gentoo.org/glsa/201504-01</a><br> <a href="http://www.securitytracker.com/id/1030619">http://www.securitytracker.com/id/1030619</a><br> <a href="http://www.securitytracker.com/id/1030620">http://www.securitytracker.com/id/1030620</a><br> <a href="http://secunia.com/advisories/59760">http://secunia.com/advisories/59760</a><br> <a href="http://secunia.com/advisories/60628">http://secunia.com/advisories/60628</a><br> </td></tr> <tr><td class=std valign=top>Copyright</td><td class=std>Copyright (C) 2021 Greenbone Networks GmbH</td></tr> </table><P><P> <table BORDER=1 cellspacing=0 cellpadding=5 bgcolor=#eeffee><tr><td class=std valign=top>This is only one of <a href="index.html#cate"><b>145615</b> vulnerability tests</a> in our test suite. Find out more about running a <a href='../smysecure/index.html'>complete security audit</a>.<p>To run a free test of this vulnerability against your system, register below.</td></tr></table><P><P> <br> </div> </div> <br> <hr> <P> <center><div class=xsmall>© 1998-2025 E-Soft Inc. All rights reserved.</div></center> <p> <div id=footer><script>oHelpGlobals.state = ""; </script> <div class=hide id=hsqhelptitle></div> <div class=hide id=hsqhelptext><div class=std></div></div> </div></body> </html>