VULNERABILITY INTELLIGENCE
CVE-2014-1488
CVSS score10 NONE
EPSS probability7.14%
CISA KEVNot currently listed
Published2014-02-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Broken Link
- security@mozilla.org — Broken Link
- security@mozilla.org — Broken Link
- security@mozilla.org — Broken Link
- security@mozilla.org — Broken Link
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory, VDB Entry
- security@mozilla.org — Third Party Advisory, VDB Entry