CVE-2014-1552: mozilla firefox
CVSS: 5.8v2.0MediumModified
AliasesUBUNTU-CVE-2014-1552
Published 23-07-2014Last modified 06-08-2024
Vulnerability summary
CVE-2014-1552 is a medium (CVSS 5.8) vulnerability in mozilla firefox. EPSS estimates a 1.26% chance of exploitation in the next 30 days, higher than 69% of scored vulnerabilities.
CVSS score
5.8/10
010
Medium · v2.0 (NVD)EPSS score
1.26%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 4Timeline
- 23-07-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:NSourcesSingle source
EPSS trend
Probability
1.26%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
0.00 pp
From 1.26% on 18-09-2026
18-09-202618-10-2026
EPSS score1.26%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla2 products
- firefox≤ 30.0
- thunderbird≤ 24.7 | 24.0 | 24.0.1 | 24.1 | 24.1.1 | 24.2 | 24.3 | 24.4 | 24.5 | 24.6
Ubuntu2 products
- firefox< 31.0+build1-0ubuntu0.14.04.1
- thunderbird< 1:31.0+build1-0ubuntu0.14.04.1
2 vendors · 4 products
References
13 links- bugzilla.mozilla.org/show_bug.cgi?id=985135X Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRM