Unrated severityNVD Advisory· Published Jul 23, 2014· Updated Jun 17, 2026
CVE-2014-1561
CVE-2014-1561
Description
Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=30.0
- (no CPE)range: <31.0
- cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
- osv-coords2 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
< 128.5.1-1.1+ 1 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 50.1.0-1.1
Patches
Vulnerability mechanics
References
8- www.mozilla.org/security/announce/2014/mfsa2014-60.htmlnvdVendor Advisory
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlnvdThird Party Advisory
- bugzilla.mozilla.org/show_bug.cginvdIssue Tracking
- bugzilla.mozilla.org/show_bug.cginvdIssue Tracking
- secunia.com/advisories/59760nvd
- secunia.com/advisories/60628nvd
- www.securitytracker.com/id/1030619nvd
- security.gentoo.org/glsa/201504-01nvd
News mentions
0No linked articles in our index yet.