Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 24.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-5592
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 25.0 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox 20.0.1Mozilla Firefox 20.0Mozilla Firefox 19.0.2Mozilla Firefox 19.0.1Mozilla Firefox 19.0Mozilla FirefoxMozilla Firefox 23.0.1Mozilla Firefox 23.0Mozilla Firefox 22.0Mozilla Firefox 21.0
NA
CVE-2014-1547
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbit...
Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5
NA
CVE-2014-1555
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allows remote malicious users to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.1Mozilla Firefox Esr 24.2Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.5Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
NA
CVE-2014-1556
Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.
Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.5Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.1Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4
NA
CVE-2014-1539
Mozilla Firefox prior to 30.0 and Thunderbird up to and including 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote malicious users to conduct clickjacking attacks via JavaScript code that...
Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.2Mozilla Thunderbird 24.1.1Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.4Mozilla Thunderbird 24.3
NA
CVE-2014-1557
The ConvolveHorizontally function in Skia, as used in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, does not properly handle the discarding of image data during function execution, which allows remote malicious users to execute arbi...
Oracle Solaris 11.3Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Debian Debian Linux 6.0
NA
CVE-2014-1549
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 does not properly allocate Web Audio buffer memory, which allows remote malicious users to execute arbitrary code or cause a denial of servic...
Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.2Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.0Mozilla Firefox
NA
CVE-2014-1550
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ...
Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox
NA
CVE-2014-1552
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote malicious users to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3
NA
CVE-2014-1558
Mozilla Firefox prior to 31.0 and Thunderbird prior to 31.0 allow remote malicious users to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-...
Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla ThunderbirdMozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Thunderbird 24.6Mozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook