CVE-2014-1590 The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of s...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | <= 31.2 | No fix listed |
| mozilla Firefox | <= 33.0 | No fix listed |
| mozilla seamonkey | <= 2.30 | No fix listed |
| mozilla Thunderbird | <= 31.2 | No fix listed |
References
- openSUSE-SU-2015:0138 vendor-advisory
- openSUSE-SU-2015:1266 vendor-advisory
- DSA-3090 vendor-advisory
- DSA-3092 vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com
- 71397 vdb-entry
- bugzilla.mozilla.org
- GLSA-201504-01 vendor-advisory