Published: 15/10/2014 Updated: 24/12/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox prior to 33.0, Firefox ESR 31.x prior to 31.2, and Thunderbird 31.x prior to 31.2 allows remote malicious users to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird 31.0
mozilla thunderbird 31.1.0
mozilla firefox esr 31.0
mozilla firefox esr 31.1.0
mozilla firefox
mozilla firefox 31.1.0
mozilla firefox 31.0
mozilla firefox 30.0

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service This update updates Icedove to the ESR31 series of Thunderbird In a ...

Mozilla Foundation Security Advisory 2014-79 Use-after-free interacting with text directionality Announced October 14, 2014 Reporter regenrecht Impact Critical Products Firefox, Firefox ESR, Firefox OS, SeaMonkey, Thunderbird ...

Use-after-free vulnerability in DirectionalityUtilscpp in Mozilla Firefox before 330, Firefox ESR 31x before 312, and Thunderbird 31x before 312 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout ...

NVD-CWE-Other https://bugzilla.mozilla.org/show_bug.cgi?id=1068218 http://www.mozilla.org/security/announce/2014/mfsa2014-79.html http://www.ubuntu.com/usn/USN-2372-1 http://rhn.redhat.com/errata/RHSA-2014-1635.html http://www.ubuntu.com/usn/USN-2373-1 http://rhn.redhat.com/errata/RHSA-2014-1647.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html http://www.debian.org/security/2014/dsa-3061 http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html http://www.debian.org/security/2014/dsa-3050 http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html https://advisories.mageia.org/MGASA-2014-0421.html http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html http://www.securitytracker.com/id/1031030 http://secunia.com/advisories/62023 http://secunia.com/advisories/61854 http://www.securityfocus.com/bid/70426 http://secunia.com/advisories/61387 http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html http://secunia.com/advisories/62022 http://www.securitytracker.com/id/1031028 http://secunia.com/advisories/62021 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2373-1/https://access.redhat.com/security/cve/cve-2014-1581

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-1581

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect