CVE-2014-1562

Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
http://secunia.com/advisories/60148
http://secunia.com/advisories/60186
http://secunia.com/advisories/61114
http://secunia.com/advisories/61390
http://www.debian.org/security/2014/dsa-3018
http://www.debian.org/security/2014/dsa-3028
http://www.mozilla.org/security/announce/2014/mfsa2014-67.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/69519
http://www.securitytracker.com/id/1030793
http://www.securitytracker.com/id/1030794
https://bugzilla.mozilla.org/show_bug.cgi?id=1054359
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html
http://secunia.com/advisories/60148
http://secunia.com/advisories/60186
http://secunia.com/advisories/61114
http://secunia.com/advisories/61390
http://www.debian.org/security/2014/dsa-3018
http://www.debian.org/security/2014/dsa-3028
http://www.mozilla.org/security/announce/2014/mfsa2014-67.html Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/69519
http://www.securitytracker.com/id/1030793
http://www.securitytracker.com/id/1030794
https://bugzilla.mozilla.org/show_bug.cgi?id=1054359
https://security.gentoo.org/glsa/201504-01
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.7:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:mozilla:thunderbird:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:24.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:31.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*

History

21 Nov 2024, 02:04

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html - () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00003.html -
References () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html - () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00005.html -
References () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html - () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00007.html -
References () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html - () http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00012.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - () http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html -
References () http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html - () http://lists.opensuse.org/opensuse-updates/2014-09/msg00011.html -
References () http://secunia.com/advisories/60148 - () http://secunia.com/advisories/60148 -
References () http://secunia.com/advisories/60186 - () http://secunia.com/advisories/60186 -
References () http://secunia.com/advisories/61114 - () http://secunia.com/advisories/61114 -
References () http://secunia.com/advisories/61390 - () http://secunia.com/advisories/61390 -
References () http://www.debian.org/security/2014/dsa-3018 - () http://www.debian.org/security/2014/dsa-3018 -
References () http://www.debian.org/security/2014/dsa-3028 - () http://www.debian.org/security/2014/dsa-3028 -
References () http://www.mozilla.org/security/announce/2014/mfsa2014-67.html - Vendor Advisory () http://www.mozilla.org/security/announce/2014/mfsa2014-67.html - Vendor Advisory
References () http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - () http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html -
References () http://www.securityfocus.com/bid/69519 - () http://www.securityfocus.com/bid/69519 -
References () http://www.securitytracker.com/id/1030793 - () http://www.securitytracker.com/id/1030793 -
References () http://www.securitytracker.com/id/1030794 - () http://www.securitytracker.com/id/1030794 -
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1054359 - () https://bugzilla.mozilla.org/show_bug.cgi?id=1054359 -
References () https://security.gentoo.org/glsa/201504-01 - () https://security.gentoo.org/glsa/201504-01 -

21 Oct 2024, 13:55

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.0:*:*:*:*:*:*:*

21 Oct 2024, 13:11

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:24.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:24.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:24.1.0:*:*:*:*:*:*:*

Information

Published : 2014-09-03 10:55

Updated : 2024-11-21 02:04


NVD link : CVE-2014-1562

Mitre link : CVE-2014-1562

CVE.ORG link : CVE-2014-1562


JSON object : View

Products Affected

mozilla

  • firefox
  • thunderbird
  • firefox_esr
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

NVD-CWE-noinfo