CVE-2014-8632 | BDVDB-2026-66735 Detail

Description#

The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to bypass intended DOM object restrictions by leveraging property availability after XrayWrapper removal.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.gentoo.org/glsa/201504-01
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.mozilla.org/security/announce/2014/mfsa2014-91.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1050340

Exploit#

No public exploit known

History#

Version 12014-12-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.