Published: 11/12/2014 Updated: 24/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 34.0, Firefox ESR 31.x prior to 31.3, Thunderbird prior to 31.3, and SeaMonkey prior to 2.31 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox esr
mozilla thunderbird
mozilla firefox
mozilla seamonkey

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wh ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wheezy), thes ...

Mozilla Foundation Security Advisory 2014-83 Miscellaneous memory safety hazards (rv:340 / rv:313) Announced December 2, 2014 Reporter Mozilla Developers Impact Critical Products Firefox, Firefox ESR, Firefox OS, SeaMonkey ...

CWE-20 http://www.mozilla.org/security/announce/2014/mfsa2014-83.html https://bugzilla.mozilla.org/show_bug.cgi?id=1079729 https://bugzilla.mozilla.org/show_bug.cgi?id=1042567 https://bugzilla.mozilla.org/show_bug.cgi?id=1089207 https://bugzilla.mozilla.org/show_bug.cgi?id=1072847 https://bugzilla.mozilla.org/show_bug.cgi?id=1080312 http://www.debian.org/security/2014/dsa-3090 http://www.debian.org/security/2014/dsa-3092 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://www.securityfocus.com/bid/71391 https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2428-1/

CVE-2014-1587

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect