Published: 03/09/2014 Updated: 30/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox prior to 32.0, Firefox ESR 31.x prior to 31.1, and Thunderbird 31.x prior to 31.1 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.

Vulnerable Product	Search on Vulmon	Subscribe to Product
opensuse opensuse 13.1
opensuse evergreen 11.4
opensuse opensuse 12.3
oracle solaris 11.3
mozilla firefox 31.0
mozilla firefox 30.0
mozilla firefox esr 31.0
mozilla firefox
mozilla thunderbird 31.0

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Foundation Security Advisory 2014-68 Use-after-free during DOM interactions with SVG Announced September 2, 2014 Reporter Abhishek Arya Impact Critical Products Firefox, Firefox ESR, SeaMonkey, Thunderbird Fixe ...

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 320, Firefox ESR 31x before 311, and Thunderbird 31x before 311 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle ...

CWE-416 https://bugzilla.mozilla.org/show_bug.cgi?id=1018524 http://www.mozilla.org/security/announce/2014/mfsa2014-68.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html http://www.securitytracker.com/id/1030794 http://www.securitytracker.com/id/1030793 http://www.securityfocus.com/bid/69523 http://secunia.com/advisories/61114 http://secunia.com/advisories/60148 https://nvd.nist.gov https://usn.ubuntu.com/2330-1/https://access.redhat.com/security/cve/cve-2014-1563

CVE-2014-1563

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect