Published: 11/12/2014 Updated: 24/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Mozilla Firefox prior to 34.0, Firefox ESR 31.x prior to 31.3, Thunderbird prior to 31.3, and SeaMonkey prior to 2.31 might allow remote malicious users to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird
mozilla firefox
mozilla firefox esr
mozilla seamonkey

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wh ...

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, the bypass of security restrictions or denial of service For the stable distribution (wheezy), thes ...

Mozilla Foundation Security Advisory 2014-89 Bad casting from the BasicThebesLayer to BasicContainerLayer Announced December 2, 2014 Reporter Byoungyoung Lee, Chengyu Song, Taesoo Kim Impact High Products Firefox, Firefox ES ...

CWE-20 https://bugzilla.mozilla.org/show_bug.cgi?id=1074280 http://www.mozilla.org/security/announce/2014/mfsa2014-89.html http://www.debian.org/security/2014/dsa-3090 http://www.debian.org/security/2014/dsa-3092 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://www.securityfocus.com/bid/71396 https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2428-1/

CVE-2014-1594

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect