Published: 11/12/2014 Updated: 24/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox prior to 34.0, Firefox ESR 31.x prior to 31.3, Thunderbird prior to 31.3, and SeaMonkey prior to 2.31 allows remote malicious users to execute arbitrary code via crafted media content.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox esr
mozilla thunderbird
mozilla seamonkey
mozilla firefox

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wh ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wheezy), thes ...

Mozilla Foundation Security Advisory 2014-88 Buffer overflow while parsing media content Announced December 2, 2014 Reporter Abhishek Arya Impact Critical Products Firefox, Firefox ESR, Firefox OS, SeaMonkey, Thunderbird ...

CWE-119 https://bugzilla.mozilla.org/show_bug.cgi?id=1085175 http://www.mozilla.org/security/announce/2014/mfsa2014-88.html http://www.debian.org/security/2014/dsa-3090 http://www.debian.org/security/2014/dsa-3092 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://www.securityfocus.com/bid/71395 https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2428-1/

CVE-2014-1593

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect