CVE-2014-1489
Fixed in a distro release EPSS 2%
Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
Products: oracle solaris, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, mozilla firefox, opensuse, opensuse_project opensuse, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |