CVE-2014-1487

HIGH 7.5CVE-2014-1487 · Published 06/02/2014 · updated 17/06/2026

In short

CVE-2014-1487 is a HIGH (CVSS 7.5) vulnerability affecting firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.4% of all vulnerabilities.
Fix: update to 24.3, 27.0, 2.24 or later.

Package	Affected versions	Patched versions
firefox mozilla	`≥ 24.0, < 24.3< 27.0`	`24.327.0`
seamonkey mozilla	`< 2.24`	`2.24`
thunderbird mozilla	`< 24.3`	`24.3`
suse linux enterprise software development kit suse	`= 11.0`	No fix yet

Description

The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.

References

download.novell.com/Download · Broken Link
download.novell.com/Download · Broken Link
lists.fedoraproject.org/pipermail/package-announce/2014-February/127966.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2014-February/129218.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html · Mailing List
osvdb.org/102873 · Broken Link
rhn.redhat.com/errata/RHSA-2014-0132.html · Third Party Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free