Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2014-1551

Published: 23/07/2014 Updated: 07/01/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Firefox Esr

Vulnerability Summary

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox prior to 31.0, Firefox ESR 24.x prior to 24.7, and Thunderbird prior to 24.7 on Windows allows remote malicious users to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox_esr 24.6

mozilla thunderbird 24.2

mozilla thunderbird 24.3

mozilla firefox_esr 24.2

mozilla firefox_esr 24.3

mozilla thunderbird 24.0

mozilla thunderbird 24.0.1

mozilla firefox_esr 24.0.1

mozilla firefox_esr 24.0.2

mozilla firefox

mozilla thunderbird

mozilla thunderbird 24.5

mozilla thunderbird 24.4

mozilla firefox_esr 24.0

mozilla firefox_esr 24.4

mozilla firefox_esr 24.5

mozilla thunderbird 24.1

mozilla thunderbird 24.1.1

mozilla firefox_esr 24.1.0

mozilla firefox_esr 24.1.1

Vendor Advisories

Mozilla: Use-after-free in DirectWrite font handling
Mozilla Foundation Security Advisory 2014-59 Use-after-free in DirectWrite font handling Announced July 22, 2014 Reporter James Kitchener Impact Critical Products Firefox, Firefox ESR, Thunderbird Fixed in ...

References

NVD-CWE-Otherhttp://www.mozilla.org/security/announce/2014/mfsa2014-59.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=1018234http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttps://security.gentoo.org/glsa/201504-01http://www.securitytracker.com/id/1030620http://www.securitytracker.com/id/1030619http://secunia.com/advisories/59760https://nvd.nist.govhttps://www.mozilla.org/en-US/security/advisories/mfsa2014-59/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook