CVE-2014-1500 Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background....
MediumCVSS 5.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opensuse | = 13.1 | No fix listed |
| opensuse project opensuse | = 11.4 | No fix listed |
| opensuse project opensuse | = 12.3 | No fix listed |
| oracle solaris | = 11.3 | No fix listed |
| mozilla Firefox | < 28.0 | 28.0 |
| mozilla seamonkey | < 2.25 | 2.25 |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
References
- SUSE-SU-2014:0418 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0419 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0448 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0584 mailing-list third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- GLSA-201504-01 third-party-advisory vendor-advisory