Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox esr 24.4 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2014-1547
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbit...
Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5
9.3
CVSSv2
CVE-2014-1555
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allows remote malicious users to execute arbitrary code via vectors that trigger a FireOnStateChange event.
Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.1Mozilla Firefox Esr 24.2Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.5Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
9.3
CVSSv2
CVE-2014-1556
Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 allow remote malicious users to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.
Mozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.5Mozilla FirefoxMozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.1Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4
9.3
CVSSv2
CVE-2014-1557
The ConvolveHorizontally function in Skia, as used in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, does not properly handle the discarding of image data during function execution, which allows remote malicious users to execute arbi...
Oracle Solaris 11.3Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Debian Debian Linux 6.0
10
CVSSv2
CVE-2014-1551
Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 on Windows allows remote malicious users to execute arbitrary code via crafted use of fonts in MathML content, leading to im...
Mozilla Firefox Esr 24.6Mozilla Thunderbird 24.2Mozilla Thunderbird 24.3Mozilla Firefox Esr 24.2Mozilla Firefox Esr 24.3Mozilla Thunderbird 24.0Mozilla Thunderbird 24.0.1Mozilla Firefox Esr 24.0.1Mozilla Firefox Esr 24.0.2Mozilla FirefoxMozilla ThunderbirdMozilla Thunderbird 24.5Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.0Mozilla Firefox Esr 24.4Mozilla Firefox Esr 24.5Mozilla Thunderbird 24.1Mozilla Thunderbird 24.1.1Mozilla Firefox Esr 24.1.0Mozilla Firefox Esr 24.1.1
10
CVSSv2
CVE-2014-1544
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7, allows remote malicious users to execute arbitrary c...
Mozilla Firefox Esr 24.6Mozilla ThunderbirdMozilla Thunderbird 24.3Mozilla Thunderbird 24.4Mozilla Firefox Esr 24.3Mozilla Firefox Esr 24.4Mozilla Network Security Services 3.12.1Mozilla Network Security Services 3.12.10Mozilla Network Security Services 3.12.5Mozilla Network Security Services 3.12.6Mozilla Network Security Services 3.14.3Mozilla Network Security Services 3.14.4Mozilla Network Security Services 3.15.5Mozilla Network Security Services 3.16Mozilla Network Security Services 3.4.1Mozilla Network Security Services 3.4.2Mozilla Network Security Services 3.7.3Mozilla Network Security Services 3.7.5Mozilla Thunderbird 24.0.1Mozilla Thunderbird 24.1Mozilla Firefox Esr 24.0.2Mozilla Firefox Esr 24.1.0
1.9
CVSSv2
CVE-2014-1496
Mozilla Firefox prior to 28.0, Firefox ESR 24.x prior to 24.4, Thunderbird prior to 24.4, and SeaMonkey prior to 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during an update.
Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdSuse Suse Linux Enterprise Software Development Kit 11.0Suse Suse Linux Enterprise Desktop 11Suse Suse Linux Enterprise Server 11
10
CVSSv2
CVE-2014-1493
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 28.0, Firefox ESR 24.x prior to 24.4, Thunderbird prior to 24.4, and SeaMonkey prior to 2.25 allow remote malicious users to cause a denial of service (memory corruption and application crash) ...
Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.10Debian Debian Linux 7.0Debian Debian Linux 8.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Eus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Workstation 6.0Suse Suse Linux Enterprise Software Development Kit 11.0Opensuse Opensuse 11.4Opensuse Opensuse 12.3
6.8
CVSSv2
CVE-2014-1509
Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox prior to 28.0, Firefox ESR 24.x prior to 24.4, Thunderbird prior to 24.4, and SeaMonkey prior to 2.25, allows remote malicious users to execute arbitrary code via a crafted extensio...
Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdRedhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Eus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Workstation 6.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.10Suse Suse Linux Enterprise Software Development Kit 11.0Opensuse Opensuse 11.4Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Suse Linux Enterprise Desktop 11
7.5
CVSSv2
CVE-2014-1511
Mozilla Firefox prior to 28.0, Firefox ESR 24.x prior to 24.4, Thunderbird prior to 24.4, and SeaMonkey prior to 2.25 allow remote malicious users to bypass the popup blocker via unspecified vectors.
Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.10Debian Debian Linux 7.0Debian Debian Linux 8.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Eus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Workstation 6.0Suse Suse Linux Enterprise Software Development Kit 11.0Opensuse Opensuse 11.4Opensuse Opensuse 12.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook