CVE Published: 11/12/2014 |
CVE Updated: 06/08/2024 |
CVE Year: 2014 Source: mozilla |
Vendor: n/a |
Product: n/a Status : PUBLISHED
CVE-2014-8631 Description
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method.