CVE-2014-1561

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the…

published July 23, 2014

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02138 · 81.8th percentile
Published
2014-07-23T10:00Z
EPSS history
Timeline
  • 23 JUL 10:00Z
    Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the…
    cvelistv5