QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-2018

Back to search

CVE-2014-2018

Published: Feb 17, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.

VendorProductVersions

n/a

n/a

affected
n/a

References

1029773
vdb-entry
x_refsource_SECTRACK
VU#863369
third-party-advisory
x_refsource_CERT-VN
1029774
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now