CVE-2014-1483: Medium severity Oracle Solaris vulnerability
Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1483?
CVE-2014-1483 is considered a medium severity vulnerability as it allows attackers to bypass the Same Origin Policy and access sensitive information.
How do I fix CVE-2014-1483?
To fix CVE-2014-1483, users should update Mozilla Firefox and SeaMonkey to versions 27.0 and 2.24 or later, respectively.
Which software versions are affected by CVE-2014-1483?
CVE-2014-1483 affects Mozilla Firefox versions prior to 27.0 and SeaMonkey versions prior to 2.24, along with certain versions of Ubuntu and openSUSE.
Can CVE-2014-1483 be exploited remotely?
Yes, CVE-2014-1483 can be exploited remotely, allowing attackers to leverage the vulnerability via crafted web content.
What is the primary impact of CVE-2014-1483?
The primary impact of CVE-2014-1483 is the potential exposure of sensitive information due to the bypass of the Same Origin Policy.