Published: 15/10/2014 Updated: 24/12/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox prior to 33.0, Firefox ESR 31.x prior to 31.2, and Thunderbird 31.x prior to 31.2 allows remote malicious users to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird 31.0
mozilla thunderbird 31.1.0
mozilla firefox esr 31.1.0
mozilla firefox esr 31.0
mozilla firefox 30.0
mozilla firefox 31.1.0
mozilla firefox 31.0
mozilla firefox

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service This update updates Icedove to the ESR31 series of Thunderbird In a ...

Mozilla Foundation Security Advisory 2014-75 Buffer overflow during CSS manipulation Announced October 14, 2014 Reporter Atte Kettunen Impact High Products Firefox, Firefox ESR, SeaMonkey, Thunderbird Fixed in ...

Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 330, Firefox ESR 31x before 312, and Thunderbird 31x before 312 allows remote attackers to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style ...

CWE-119 https://bugzilla.mozilla.org/show_bug.cgi?id=1041512 http://www.mozilla.org/security/announce/2014/mfsa2014-75.html http://www.ubuntu.com/usn/USN-2372-1 http://rhn.redhat.com/errata/RHSA-2014-1635.html http://www.ubuntu.com/usn/USN-2373-1 http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html http://www.debian.org/security/2014/dsa-3061 http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html http://www.debian.org/security/2014/dsa-3050 http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html https://advisories.mageia.org/MGASA-2014-0421.html http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html http://www.securitytracker.com/id/1031030 http://secunia.com/advisories/62023 http://secunia.com/advisories/61854 http://secunia.com/advisories/61387 http://www.securityfocus.com/bid/70430 http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html http://secunia.com/advisories/62022 http://www.securitytracker.com/id/1031028 http://secunia.com/advisories/62021 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2373-1/https://access.redhat.com/security/cve/cve-2014-1576

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-1576

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect