QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1502

Published: Mar 19, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

SUSE-SU-2014:0418

vendor-advisory

x_refsource_SUSE

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

x_refsource_CONFIRM

http://www.mozilla.org/security/announce/2014/mfsa2014-22.html

x_refsource_CONFIRM

https://bugzilla.mozilla.org/show_bug.cgi?id=972622

x_refsource_CONFIRM

openSUSE-SU-2014:0419

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2014:0584

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2014:0448

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.