Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:04
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - | |
References | () http://www.debian.org/security/2014/dsa-3090 - | |
References | () http://www.debian.org/security/2014/dsa-3092 - | |
References | () http://www.mozilla.org/security/announce/2014/mfsa2014-87.html - Vendor Advisory | |
References | () http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - | |
References | () http://www.securityfocus.com/bid/71398 - | |
References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1088635 - | |
References | () https://security.gentoo.org/glsa/201504-01 - |
Information
Published : 2014-12-11 11:59
Updated : 2024-11-21 02:04
NVD link : CVE-2014-1592
Mitre link : CVE-2014-1592
CVE.ORG link : CVE-2014-1592
JSON object : View
Products Affected
mozilla
- firefox
- firefox_esr
- thunderbird
- seamonkey
CWE