PublicDateAtUSN: 2014-03-18
Candidate: CVE-2014-1505
PublicDate: 2014-03-19 10:55:00 UTC
References: 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1505
 http://www.mozilla.org/security/announce/2014/mfsa2014-28.html
 https://ubuntu.com/security/notices/USN-2150-1
 https://ubuntu.com/security/notices/USN-2151-1
Description:
 The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR
 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows
 remote attackers to obtain sensitive displacement-correlation information,
 and possibly bypass the Same Origin Policy and read text from a different
 domain, via a timing attack involving feDisplacementMap elements, a related
 issue to CVE-2013-1693.
Ubuntu-Description: 
Notes: 
Bugs: 
Priority: medium
Discovered-by:
Assigned-to: chrisccoulson
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]

Patches_firefox:
upstream_firefox: released (28.0)
lucid_firefox: ignored (reached end-of-life)
precise_firefox: released (28.0+build2-0ubuntu0.12.04.1)
quantal_firefox: released (28.0+build2-0ubuntu0.12.10.1)
saucy_firefox: released (28.0+build2-0ubuntu0.13.10.1)
devel_firefox: released (28.0+build2-0ubuntu1)

Patches_thunderbird:
Priority_thunderbird: low
upstream_thunderbird: released (24.4.0)
lucid_thunderbird: ignored (reached end-of-life)
precise_thunderbird: released (1:24.4.0+build1-0ubuntu0.12.04.1)
quantal_thunderbird: released (1:24.4.0+build1-0ubuntu0.12.10.1)
saucy_thunderbird: released (1:24.4.0+build1-0ubuntu0.13.10.2)
devel_thunderbird: released (1:24.4.0+build1-0ubuntu1)