{"cvss":0.0,"datePublished":"2017-01-09T00:00:00Z","dateUpdated":"2017-01-09T00:00:00Z","description":"The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.","dueDate":"","id":"CVE-2014-8636","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Firefox","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Mozilla Firefox Improper Control of Generation of Code","vendor":"Mozilla"}