CVE-2014-1590

CVE-2014-1590 describes a denial-of-service vulnerability affecting Mozilla Firefox (before 34.0, ESR 31.x before 31.3), Thunderbird (before 31.3), and SeaMonkey (before 2.31). A remote attacker can exploit a flaw in the XMLHttpRequest.prototype.send method by providing a specially crafted JavaScript object, leading to an application crash. This vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and a partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting low current threat activity.