Published: 15/10/2014 Updated: 24/12/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 33.0, Firefox ESR 31.x prior to 31.2, and Thunderbird 31.x prior to 31.2 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 31.1.0
mozilla firefox 31.0
mozilla firefox
mozilla thunderbird 31.0
mozilla firefox esr 31.0
mozilla thunderbird 31.1.0
mozilla firefox 30.0
mozilla firefox esr 31.1.0

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service This update updates Icedove to the ESR31 series of Thunderbird In a ...

Mozilla Foundation Security Advisory 2014-74 Miscellaneous memory safety hazards (rv:330 / rv:312) Announced October 14, 2014 Reporter Mozilla Developers Impact Critical Products Firefox, Firefox ESR, Firefox OS, SeaMonkey, ...

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 330, Firefox ESR 31x before 312, and Thunderbird 31x before 312 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors ...

NVD-CWE-noinfo https://bugzilla.mozilla.org/show_bug.cgi?id=1061600 http://www.mozilla.org/security/announce/2014/mfsa2014-74.html https://bugzilla.mozilla.org/show_bug.cgi?id=1064346 https://bugzilla.mozilla.org/show_bug.cgi?id=1061214 https://bugzilla.mozilla.org/show_bug.cgi?id=1072044 https://bugzilla.mozilla.org/show_bug.cgi?id=1072174 https://bugzilla.mozilla.org/show_bug.cgi?id=1011354 http://www.ubuntu.com/usn/USN-2372-1 http://www.ubuntu.com/usn/USN-2373-1 http://rhn.redhat.com/errata/RHSA-2014-1647.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html http://rhn.redhat.com/errata/RHSA-2014-1635.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html http://www.debian.org/security/2014/dsa-3061 http://www.debian.org/security/2014/dsa-3050 http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html https://advisories.mageia.org/MGASA-2014-0421.html http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html http://www.securitytracker.com/id/1031030 http://secunia.com/advisories/61854 http://secunia.com/advisories/61387 http://www.securitytracker.com/id/1031028 http://secunia.com/advisories/62023 http://www.securityfocus.com/bid/70436 http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html http://secunia.com/advisories/62022 http://secunia.com/advisories/62021 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2373-1/https://access.redhat.com/security/cve/cve-2014-1574

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-1574

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect