oval:org.mitre.oval:def:24799

Definition Id: oval:org.mitre.oval:def:24799
 
Oval ID: oval:org.mitre.oval:def:24799
Title: Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.
Description: Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.
Family: windows Class: vulnerability
Reference(s): CVE-2014-1561
Version: 7
Platform(s): Microsoft Windows Server 2012 R2
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows 8
Microsoft Windows Server 2008 R2
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s): Mozilla Firefox
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:22259
 
Oval ID: oval:org.mitre.oval:def:22259
Title: Mozilla Firefox Mainline release is installed
Description: The browser installed on the system is Mozilla Firefox Mainline release
Family: windows Class: inventory
Reference(s): cpe:/a:mozilla:firefox
Version: 9
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2012
Product(s): Mozilla Firefox
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:24799