Published: 11/12/2014 Updated: 24/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox prior to 34.0, Firefox ESR 31.x prior to 31.3, Thunderbird prior to 31.3, and SeaMonkey prior to 2.31 allows remote malicious users to execute arbitrary code by adding a second root element to an HTML5 document during parsing.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla seamonkey
mozilla thunderbird
mozilla firefox
mozilla firefox esr

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wh ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wheezy), thes ...

Mozilla Foundation Security Advisory 2014-87 Use-after-free during HTML5 parsing Announced December 2, 2014 Reporter SkyLined Impact Critical Products Firefox, Firefox ESR, Firefox OS, SeaMonkey, Thunderbird Fixed in ...

NVD-CWE-Other http://www.mozilla.org/security/announce/2014/mfsa2014-87.html https://bugzilla.mozilla.org/show_bug.cgi?id=1088635 http://www.debian.org/security/2014/dsa-3090 http://www.debian.org/security/2014/dsa-3092 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://www.securityfocus.com/bid/71398 https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2428-1/

CVE-2014-1592

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect