NetSight
IP …
medium6.8

CVE-2014-1526

The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restric…

Impact

The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects.

Affected products

VendorProductAffected versions
MozillaFirefox
before 29.0
MozillaSeamonkey
before 2.26
CanonicalUbuntu Linux
Versions 12.04, 12.10, 13.10, 14.04
OpensuseOpensuse
Versions 12.3, 13.1
FedoraprojectFedora
Version 19

Weakness classification

CWE-269

References