CVE-2014-1510 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-1510 Interim 1 30 2025-11-05T05:10:55Z current 2021-05-30T13:18:58Z 2025-11-05T05:10:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-1510 The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S65HS5TZPGO7EQHLA3LOEW5IEBSE7PAC/#S65HS5TZPGO7EQHLA3LOEW5IEBSE7PAC E-Mail link for openSUSE-SU-2014:0419-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SSQWAEVA4OHDLGA2V23WDRMLXNZ2CV4W/#SSQWAEVA4OHDLGA2V23WDRMLXNZ2CV4W E-Mail link for openSUSE-SU-2014:0448-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V4XETPVFGYYN3NKRN3562AZINSE5BRGD/#V4XETPVFGYYN3NKRN3562AZINSE5BRGD E-Mail link for openSUSE-SU-2014:0584-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LZWA5IC5L2QN74MAY2LDOH57OMCZY4GE/#LZWA5IC5L2QN74MAY2LDOH57OMCZY4GE E-Mail link for openSUSE-SU-2014:1100-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/ E-Mail link for openSUSE-SU-2024:14572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 6 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 openSUSE Leap 15.0 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-140.2.0-160000.1.2 MozillaFirefox-24.4.0esr-0.5.5.1 MozillaFirefox-24.4.0esr-0.8.1 MozillaFirefox-31.7.0esr-0.8.1 MozillaFirefox-50.1.0-1.1 MozillaFirefox-52.7.3-1.35 MozillaFirefox-60.0-lp150.2.2 MozillaFirefox-branding-SLED-24-0.4.10.9 MozillaFirefox-branding-SLED-24-0.7.23 MozillaFirefox-branding-upstream-50.1.0-1.1 MozillaFirefox-buildsymbols-50.1.0-1.1 MozillaFirefox-devel-140.2.0-160000.1.2 MozillaFirefox-devel-24.4.0esr-0.8.1 MozillaFirefox-devel-31.7.0esr-0.8.1 MozillaFirefox-devel-50.1.0-1.1 MozillaFirefox-devel-52.7.3-1.35 MozillaFirefox-translations-24.4.0esr-0.5.5.1 MozillaFirefox-translations-24.4.0esr-0.8.1 MozillaFirefox-translations-31.7.0esr-0.8.1 MozillaFirefox-translations-common-140.2.0-160000.1.2 MozillaFirefox-translations-common-50.1.0-1.1 MozillaFirefox-translations-common-52.7.3-1.35 MozillaFirefox-translations-common-60.0-lp150.2.2 MozillaFirefox-translations-other-140.2.0-160000.1.2 MozillaFirefox-translations-other-50.1.0-1.1 MozillaFirefox-translations-other-52.7.3-1.35 MozillaFirefox-translations-other-60.0-lp150.2.2 MozillaThunderbird-45.5.1-1.1 MozillaThunderbird-52.7-lp150.2.16 MozillaThunderbird-52.8-1.2 MozillaThunderbird-60.6.1-3.28.1 MozillaThunderbird-buildsymbols-45.5.1-1.1 MozillaThunderbird-devel-45.5.1-1.1 MozillaThunderbird-devel-52.8-1.2 MozillaThunderbird-translations-common-45.5.1-1.1 MozillaThunderbird-translations-common-52.7-lp150.2.16 MozillaThunderbird-translations-common-52.8-1.2 MozillaThunderbird-translations-common-60.6.1-3.28.1 MozillaThunderbird-translations-other-45.5.1-1.1 MozillaThunderbird-translations-other-52.7-lp150.2.16 MozillaThunderbird-translations-other-52.8-1.2 MozillaThunderbird-translations-other-60.6.1-3.28.1 firefox-esr-128.5.1-1.1 firefox-esr-branding-upstream-128.5.1-1.1 firefox-esr-translations-common-128.5.1-1.1 firefox-esr-translations-other-128.5.1-1.1 mozilla-nspr-32bit-4.10.4-0.3.1 mozilla-nspr-4.10.4-0.3.1 mozilla-nspr-devel-4.10.4-0.3.1 mozilla-nspr-x86-4.10.4-0.3.1 seamonkey-2.40-6.1 seamonkey-dom-inspector-2.40-6.1 seamonkey-irc-2.40-6.1 seamonkey-translations-common-2.40-6.1 seamonkey-translations-other-2.40-6.1 MozillaFirefox-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 MozillaFirefox-branding-SLED-24-0.7.23 as a component of SUSE Linux Enterprise Desktop 11 SP3 MozillaFirefox-translations-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 mozilla-nspr-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 mozilla-nspr-32bit-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 MozillaFirefox-52.7.3-1.35 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-devel-52.7.3-1.35 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-translations-common-52.7.3-1.35 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-translations-other-52.7.3-1.35 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-24.4.0esr-0.5.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-branding-SLED-24-0.4.10.9 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-translations-24.4.0esr-0.5.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nspr-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-nspr-32bit-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-branding-SLED-24-0.7.23 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-translations-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-nspr-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-nspr-32bit-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-nspr-x86-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-branding-SLED-24-0.7.23 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-translations-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nspr-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mozilla-nspr-32bit-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-devel-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-translations-common-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-translations-other-140.2.0-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 MozillaFirefox-branding-SLED-24-0.7.23 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 MozillaFirefox-translations-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 mozilla-nspr-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 mozilla-nspr-32bit-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 mozilla-nspr-x86-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 MozillaFirefox-devel-24.4.0esr-0.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 mozilla-nspr-devel-4.10.4-0.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 MozillaFirefox-devel-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 MozillaThunderbird-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-devel-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-translations-common-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-translations-other-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-60.6.1-3.28.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 MozillaThunderbird-translations-common-60.6.1-3.28.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 MozillaThunderbird-translations-other-60.6.1-3.28.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 MozillaFirefox-60.0-lp150.2.2 as a component of openSUSE Leap 15.0 MozillaFirefox-translations-common-60.0-lp150.2.2 as a component of openSUSE Leap 15.0 MozillaFirefox-translations-other-60.0-lp150.2.2 as a component of openSUSE Leap 15.0 MozillaThunderbird-52.7-lp150.2.16 as a component of openSUSE Leap 15.0 MozillaThunderbird-translations-common-52.7-lp150.2.16 as a component of openSUSE Leap 15.0 MozillaThunderbird-translations-other-52.7-lp150.2.16 as a component of openSUSE Leap 15.0 MozillaFirefox-50.1.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-50.1.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-buildsymbols-50.1.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-devel-50.1.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-50.1.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-50.1.0-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-buildsymbols-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-devel-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-translations-common-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-translations-other-45.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.5.1-1.1 as a component of openSUSE Tumbleweed seamonkey-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-dom-inspector-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-irc-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-translations-common-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-translations-other-2.40-6.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Enterprise Storage 6 The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call. CVE-2014-1510 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-24.4.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-branding-SLED-24-0.7.23 SUSE Linux Enterprise Desktop 11 SP3:MozillaFirefox-translations-24.4.0esr-0.8.1 SUSE Linux Enterprise Desktop 11 SP3:mozilla-nspr-4.10.4-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:mozilla-nspr-32bit-4.10.4-0.3.1 SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-52.7.3-1.35 SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel-52.7.3-1.35 SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common-52.7.3-1.35 SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other-52.7.3-1.35 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-24.4.0esr-0.5.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-branding-SLED-24-0.4.10.9 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-translations-24.4.0esr-0.5.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nspr-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-nspr-32bit-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-24.4.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-branding-SLED-24-0.7.23 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-24.4.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3:mozilla-nspr-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP3:mozilla-nspr-32bit-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP3:mozilla-nspr-x86-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-24.4.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-24-0.7.23 SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-24.4.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nspr-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mozilla-nspr-32bit-4.10.4-0.3.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 16.0:MozillaFirefox-140.2.0-160000.1.2 SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-140.2.0-160000.1.2 SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-140.2.0-160000.1.2 SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-140.2.0-160000.1.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-24.4.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-branding-SLED-24-0.7.23 SUSE Linux Enterprise Server for SAP Applications 11 SP3:MozillaFirefox-translations-24.4.0esr-0.8.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:mozilla-nspr-4.10.4-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:mozilla-nspr-32bit-4.10.4-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:mozilla-nspr-x86-4.10.4-0.3.1 SUSE Linux Enterprise Software Development Kit 11 SP3:MozillaFirefox-devel-24.4.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP3:mozilla-nspr-devel-4.10.4-0.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-31.7.0esr-0.8.1 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-devel-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.6.1-3.28.1 SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.6.1-3.28.1 SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.6.1-3.28.1 openSUSE Leap 15.0:MozillaFirefox-60.0-lp150.2.2 openSUSE Leap 15.0:MozillaFirefox-translations-common-60.0-lp150.2.2 openSUSE Leap 15.0:MozillaFirefox-translations-other-60.0-lp150.2.2 openSUSE Leap 15.0:MozillaThunderbird-52.7-lp150.2.16 openSUSE Leap 15.0:MozillaThunderbird-translations-common-52.7-lp150.2.16 openSUSE Leap 15.0:MozillaThunderbird-translations-other-52.7-lp150.2.16 openSUSE Tumbleweed:MozillaFirefox-50.1.0-1.1 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-50.1.0-1.1 openSUSE Tumbleweed:MozillaFirefox-buildsymbols-50.1.0-1.1 openSUSE Tumbleweed:MozillaFirefox-devel-50.1.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-common-50.1.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-other-50.1.0-1.1 openSUSE Tumbleweed:MozillaThunderbird-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-buildsymbols-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-devel-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-translations-common-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-translations-other-45.5.1-1.1 openSUSE Tumbleweed:firefox-esr-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.5.1-1.1 openSUSE Tumbleweed:seamonkey-2.40-6.1 openSUSE Tumbleweed:seamonkey-dom-inspector-2.40-6.1 openSUSE Tumbleweed:seamonkey-irc-2.40-6.1 openSUSE Tumbleweed:seamonkey-translations-common-2.40-6.1 openSUSE Tumbleweed:seamonkey-translations-other-2.40-6.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H